diff --git a/CHANGES b/CHANGES
index b62c2ac6..232d3131 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,8 @@
 DD MMM YYYY - 2.9.3 - To be released
 ------------------------------------
 
+ * IIS: buffer request body before taking lock
+   [Issue #1651 - @allanbomsft]
  * good practices: Initialize variables before use it
    [Issue #1889 - Marc Stern]
  * Let body parsers observe SecRequestBodyNoFilesLimit