diff --git a/CHANGES.rst b/CHANGES.rst
index 2578a5a2460..1cdf8ee428b 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -5,6 +5,12 @@ Changelog (Pillow)
 8.3.2 (2021-09-02)
 ------------------
 
+- CVE-2021-23437 Raise ValueError if color specifier is too long
+  [hugovk, radarhere]
+
+- Fix 6-byte OOB read in FliDecode
+  [wiredfool]
+
 - Add support for Python 3.10 #5569, #5570
   [hugovk, radarhere]