diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html
index dc68e62f49..06cdb37b56 100644
--- a/phpBB/docs/CHANGELOG.html
+++ b/phpBB/docs/CHANGELOG.html
@@ -50,6 +50,7 @@
- Changelog
+ - Changes since 3.2.8-RC1
- Changes since 3.2.7
- Changes since 3.2.6
- Changes since 3.2.6-RC1
@@ -139,6 +140,28 @@
+
Changes since 3.2.8-RC1
+
Bug
+
+ - [PHPBB3-15467] - Permission settings do not take affect when set using All YES/NO/NEVER
+ - [PHPBB3-16123] - PHP error (Array to string conversion) on new user registration if email address is banned and " Reason shown to the banned" is empty
+ - [PHPBB3-16136] - Missing word in 'AUTH_PROVIDER_OAUTH_ERROR_ALREADY_LINKED'
+
+
Improvement
+
+ - [PHPBB3-16134] - Exclude group leaders on group member purge
+
+
Security Issue
+
+ - [SECURITY-243] - CSS injection via BBCode tag
+ - [SECURITY-244] - Missing form token check when handling attachments
+ - [SECURITY-246] - Missing form token check when managing BBCodes
+
+
Hardening
+
+ - [SECURITY-247] - Disable MySQLi local infile to prevent local file inclusion
+
+
Changes since 3.2.7
Bug
+
Hardening
+
Changes since 3.2.6
Bug