diff --git a/CHANGES b/CHANGES
index 7a843b1b16fd36104398cc1ccfc01c97e34511ec..0c96da129cb4fe82815bab20c4a4c19988521ccf 100644
--- a/CHANGES
+++ b/CHANGES
@@ -842,6 +842,7 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
      the clients preferred ciphersuites and rather use its own preferences.
      Should help to work around M$ SGC (Server Gated Cryptography) bug in
      Internet Explorer by ensuring unchanged hash method during stepup.
+     (Also replaces the broken/deactivated SSL_OP_NON_EXPORT_FIRST option.)
      [Lutz Jaenicke]
 
   +) Make mkdef.pl recognise all DECLARE_ASN1 macros, change rijndael