diff --git a/CHANGELOG.md b/CHANGELOG.md
index ca2bf955..03c467cb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -194,6 +194,10 @@
 - Classes were renamed and namespaced ([#243](https://github.com/phpseclib/phpseclib/issues/243))
 - The use of an autoloader is now required (e.g. Composer)
 
+## 1.0.18 - 2019-09-16
+
+- SSH2: fix regression for connecting to servers with bad hostnames (#1405)
+
 ## 1.0.17 - 2019-09-15
 
 - SSH2: backport setPreferredAlgorithms() / getAlgorithmsNegotiated (#1156)
diff --git a/README.md b/README.md
index cf25f6c5..90c41cfa 100644
--- a/README.md
+++ b/README.md
@@ -45,7 +45,7 @@ AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509
 * Composer compatible (PSR-0 autoloading)
 * Install using Composer: `composer require phpseclib/phpseclib:~1.0`
 * Install using PEAR: See [phpseclib PEAR Channel Documentation](http://phpseclib.sourceforge.net/pear.htm)
-* [Download 1.0.17 as ZIP](http://sourceforge.net/projects/phpseclib/files/phpseclib1.0.17.zip/download)
+* [Download 1.0.18 as ZIP](http://sourceforge.net/projects/phpseclib/files/phpseclib1.0.18.zip/download)
 
 ## Security contact information