diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5af0babd1..63f62de4b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,7 +2,10 @@
 
 ## Unreleased: mitmproxy next
 
-* Temporarily downgrade PyInstaller to fix standalone Linux binaries.
+* The precompiled binaries now ship with OpenSSL 3.0.7, which resolves CVE-2022-3602 and CVE-2022-3786.
+* Performance and stability improvements for WireGuard mode.
+  ([#5694](https://github.com/mitmproxy/mitmproxy/issues/5694), @mhils, @decathorpe)
+* Fix a bug where the standalone Linux binaries would require libffi to be installed.
   ([#5699](https://github.com/mitmproxy/mitmproxy/issues/5699), @mhils)
 * Hard exit when mitmproxy cannot write logs, fixes endless loop when parent process exits.
   ([#4669](https://github.com/mitmproxy/mitmproxy/issues/4669), @Prinzhorn)
diff --git a/setup.py b/setup.py
index eab22dead..94ef426ed 100644
--- a/setup.py
+++ b/setup.py
@@ -108,7 +108,7 @@ setup(
             "hypothesis>=5.8,<7",
             "parver>=0.1,<2.0",
             "pdoc>=4.0.0",
-            "pyinstaller==5.5",
+            "pyinstaller==5.6.2",
             "pytest-asyncio>=0.17,<0.21",
             "pytest-cov>=2.7.1,<4.1",
             "pytest-timeout>=1.3.3,<2.2",