diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2243e834f..7c83ce824 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,9 +26,13 @@ Main (unreleased)
 
 - Changed OTEL alerts in Alloy mixin to use success rate for tracing. (@thampiotr)
 
-v1.4.0-rc.3
+v1.4.0
 -----------------
 
+### Security fixes
+
+- Add quotes to windows service path to prevent path interception attack. [CVE-2024-8975](https://grafana.com/security/security-advisories/cve-2024-8975/) (@mattdurham)
+
 ### Breaking changes
 
 - Some debug metrics for `otelcol` components have changed. (@thampiotr)