diff --git a/CHANGES b/CHANGES
index a07070573042b04abe17eb5ff3910657138f5677..c619cce8979d6ca24316d726bb0b32f9fc0a87e2 100644
--- a/CHANGES
+++ b/CHANGES
@@ -10,6 +10,15 @@
                                    [23-Dec-1998] down below; but in later
                                    versions, these hyphens are gone.]
 
+  *) Change type of various DES function arguments from des_cblock
+     (which means, in function argument declarartions, pointer to char)
+     to des_cblock * (meaning pointer to array with 8 char elements),
+     which allows the compiler to do more typechecking; it was like
+     that back in SSLeay, but with lots of ugly casts.
+
+     Introduce new type const_des_cblock.
+     [Bodo Moeller]
+
   *) Reorganise the PKCS#7 library and get rid of some of the more obvious
      problems: find RecipientInfo structure that matches recipient certificate
      and initialise the ASN1 structures properly based on passed cipher.