diff --git a/ChangeLog b/ChangeLog
index 219e3031..472a8014 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -8,6 +8,8 @@
   * Issue stubby#295: rdata not correctly written for validation for certain 
     RR type. Also, set default built type to RelWithDebInfo and expose CFLAGS
     via GETDNS_BUILD_CFLAGS define and via getdns_context_get_api_information()
+  * Issue #524: Bug fixes from submodules' upstream?
+    Thanks Johnnyslee
 
 * 2021-06-04: Version 1.7.0
   * Make TLS Handshake timeout max 4/5th of timeout for the query,
diff --git a/src/ssl_dane b/src/ssl_dane
index afd5b886..89ff4597 160000
--- a/src/ssl_dane
+++ b/src/ssl_dane
@@ -1 +1 @@
-Subproject commit afd5b88687f05554513d9caf000f08904e32e6a4
+Subproject commit 89ff45974cafa7e03f0503ed013fe3e680698c20