diff --git a/CHANGES.txt b/CHANGES.txt
index 7cea929a00..c70b5e8c8b 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -195,6 +195,9 @@ Merged from 4.1:
  * Enforce CQL message size limit on multiframe messages (CASSANDRA-20052)
  * Fix race condition in DecayingEstimatedHistogramReservoir during rescale (CASSANDRA-19365)
 Merged from 4.0:
+ * Suppress CVE-2024-12801 (CASSANDRA-20412)
+ * Suppress CVE-2024-12798 (CASSANDRA-20408)
+ * Support null column value tombstones in FQL batch statements (CASSANDRA-20397)
  * Update Zstd library to 1.5.7-1 (CASSANDRA-20367)
  * Fix premature auto-failing of long-running repairs (CASSANDRA-20312)
  * Fix autocompletion for role names/user names (CASSANDRA-20175)