diff --git a/CHANGES b/CHANGES
index 390c17e212e0579d6f3a7cf8fa41fb9ba0b7c846..b04121131478d58d99c776014cf0900f1e7ba00e 100644
--- a/CHANGES
+++ b/CHANGES
@@ -9,7 +9,7 @@
      first two bytes of the ClientHello message, i.e. client_version.
      (Note that this is a pathologic case that probably has never happened
      in real life.)  The previous approach was to use the version number
-     from the record header as a subsitute; but our protocol choice
+     from the record header as a substitute; but our protocol choice
      should not depend on that one because it is not authenticated
      by the Finished messages.
      [Bodo Moeller]