diff --git a/debian/changelog b/debian/changelog
index 11a2c0a..61b93c0 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+pve-edk2-firmware (4.2023.08-4) bookworm; urgency=medium
+
+  * fix CVE-2023-48733: disable EFI shell in SB mode
+
+ -- Proxmox Support Team <support@proxmox.com>  Thu, 15 Feb 2024 08:56:32 +0100
+
 pve-edk2-firmware (4.2023.08-3) bookworm; urgency=medium
 
   * fixes for "PixieFAIL" PXE vulnerabilities