diff --git a/NEWS b/NEWS
index f6cd485d69a930bb985a62f088214b332cb64726..32d44fee4ba6f67d4f8497abf0e46a997dd9a774 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,5 @@
-Changes between 0.8.6 and 0.9.0-test1 (not released yet):
-----------------------------------------------------------
+Changes between 0.8.6i and 0.9.0-test1:
+---------------------------------------
 
 Important notes:
 ----------------
@@ -243,6 +243,13 @@ Developers:
   * Java bindings are now built from a separate source.
 
 
+Changes between 0.8.6h and 0.8.6i:
+----------------------------------
+
+Security updates:
+ * Fixed integer overflow in WAV demuxer (CVE-2008-2430)
+
+
 Changes between 0.8.6g and 0.8.6h:
 ----------------------------------