diff --git a/CHANGELOG.md b/CHANGELOG.md
index 606c1f64fe4a7d..1761f8aa6546d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -87,7 +87,8 @@ release.
4.0.0
-0.12.16
+0.12.17
+0.12.16
0.12.15
0.12.14
0.12.13
diff --git a/doc/changelogs/CHANGELOG_V012.md b/doc/changelogs/CHANGELOG_V012.md
index b39f0e4fc47cca..0e6dbe116fae93 100644
--- a/doc/changelogs/CHANGELOG_V012.md
+++ b/doc/changelogs/CHANGELOG_V012.md
@@ -6,6 +6,7 @@
|
+0.12.17
0.12.16
0.12.15
0.12.14
@@ -39,6 +40,19 @@
[Node.js Long Term Support Plan](https://github.com/nodejs/LTS) and
will be maintained until December 31st, 2016.
+
+## 2016-10-18, Version 0.12.17 (Maintenance), @rvagg
+
+This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/october-2016-security-releases/ for details on patched vulnerabilities.
+
+### Notable changes:
+
+* c-ares: fix for single-byte buffer overwrite, CVE-2016-5180, more information at https://c-ares.haxx.se/adv_20160929.html (Daniel Stenberg)
+
+### Commits:
+
+* [c5b095ecf8] - deps: avoid single-byte buffer overwrite (Daniel Stenberg) https://github.com/nodejs/node/pull/8849
+
## 2016-09-27, Version 0.12.16 (Maintenance), @rvagg
|