diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7be653e994af..d9c80ac5858c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,8 @@ Line wrap the file at 100 chars.                                              Th
 - Add CLI support for applying patches to the settings with `mullvad import-settings`.
 
 ### Changed
+- Update OpenVPN to 2.6.8 from 2.6.0.
+
 #### Android
 - Migrate welcome view to compose.
 - Migrate in app notifications to compose.
@@ -44,6 +46,9 @@ Line wrap the file at 100 chars.                                              Th
 - Rename interface name from `wg-mullvad` to `wg0-mullvad`.
 
 ### Fixed
+- Update OpenVPN to 2.6.8 to fix CVE-2023-46850, which could cause freed memory to be sent to the
+  peer.
+
 #### Linux
 - Prevent fragmentation when multihop is enabled by setting a default route MTU.