diff --git a/CHANGES b/CHANGES
index da32b0c223d9d3180b1f6ad93c7a7d726f72e7ee..7ff2ec42994b7ed2f205dd0032ff67ecc53ba25c 100644
--- a/CHANGES
+++ b/CHANGES
@@ -510,6 +510,9 @@
 
  Changes between 0.9.8e and 0.9.8f  [xx XXX xxxx]
 
+  *) Mitigate attack on final subtraction in Montgomery reduction.
+     [Andy Polyakov]
+
   *) Fix crypto/ec/ec_mult.c to work properly with scalars of value 0
      (which previously caused an internal error).
      [Bodo Moeller]