diff --git a/CHANGELOG.md b/CHANGELOG.md
index b9b3f64e..7f173d1e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -20,6 +20,7 @@ The **patch** part changes incrementally at each release.
 * certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")
 * evoacme: upstream release 21.01
 * minifirewall: change some defaults
+* cerbot: use the legacy script on Debian 8 and 9
 
 ### Fixed