diff --git a/CHANGES b/CHANGES
index ce2d6fc92..285aea7dc 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,9 @@
 
  Changes between 0.9.8e and 0.9.8f  [xx XXX xxxx]
 
+  *) Mitigate attack on final subtraction in Montgomery reduction.
+     [Andy Polyakov]
+
   *) Fix crypto/ec/ec_mult.c to work properly with scalars of value 0
      (which previously caused an internal error).
      [Bodo Moeller]