diff --git a/CHANGES b/CHANGES
index 9b18ffcf003bbd5f535cd1509d57ecd5a337a022..4e3d67f39fef1f88d696458d6c9efcbf23661f83 100644
--- a/CHANGES
+++ b/CHANGES
@@ -7,6 +7,14 @@
                                   Changelog
 
 
+Daniel (15 November)
+- Mathias Axelsson found out libcurl sometimes freed the server certificate
+  twice, leading to crashes!
+
+Daniel (14 November)
+- Siddhartha Prakash Jain found a case with a bad resolve that we didn't
+  properly bail out from, when using ares.
+
 Daniel (13 November)
 - Default Content-Type for parts in multipart formposts has changed to
   "application/octet-stream".  This seems more appropriate, and I believe