diff --git a/CHANGES b/CHANGES
index 5c5017b62cfa2e..788c16e56c1b14 100644
--- a/CHANGES
+++ b/CHANGES
@@ -7,6 +7,12 @@
                                   Changelog
 
 
+Daniel (23 October)
+- Georg Horn fixed how the CA verification is made. Verifications can now be
+  made while at the same time the result of it can be ignored. This also
+  affects the curl tool as -k can now be used together with --cacert or
+  --capath.
+
 Daniel (22 October)
 - Gisle Vanem found out --disable-eprt didn't work and patched it.
 
diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 21416379f416c3..4d84492f31c513 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -22,6 +22,8 @@ This release includes the following changes:
 
 This release includes the following bugfixes:
 
+ o --disable-eprt works now
+ o improved CA cert verification
  o --anyauth could bug when the first response had no body contents
  o double password prompting when doing NTLM fixed
  o improved performance when used multi-threaded on windows