diff --git a/CHANGES b/CHANGES
index b3b4ed9e..4880f838 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,8 @@
 CHANGES - changes for libtpms
 
+version 0.8.9:
+ - tpm2: Check size of buffer before accessing it (CVE-2023-1017 & -1018)
+
 version 0.8.8:
  - tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
  - tpm2: Fix a potential overflow expression (coverity)