diff --git a/debian/changelog b/debian/changelog
index 3eda200ca..fc2042e39 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,7 @@
-freeipa (4.4.3-4) UNRELEASED; urgency=medium
+freeipa (4.4.4-1) UNRELEASED; urgency=medium
 
+  * New upstream release.
+    - CVE-2017-2590
   * fix-is-running.diff: Add a third argument to is_running() in
     ipaplatform/debian/services.py. (Closes: #856533)
   * fix-kdcproxy-path.diff: Update debian/paths.py to use correct path