diff --git a/CHANGELOG b/CHANGELOG
index 2f93fcdbaa0cf8aec677e2cb21ce44094a2e86bb..2f29a64df1bb9fe6e25cb93575aa985e4f816955 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -38,6 +38,7 @@ v 8.9.5 (unreleased)
   - Show "locked" label for locked runners on runners admin. !4961
   - Fixes issues importing events in Import/Export. Import/Export version bumped to 0.1.1
   - Fix import button disabled when import process fail due to the namespace already been taken.
+  - Security: Update RedCloth to 4.3.2 (Takuya Noguchi)
 
 v 8.9.4
   - Fix privilege escalation issue with OAuth external users.