diff --git a/changes/bug2358 b/changes/bug2358
new file mode 100644
index 0000000000000000000000000000000000000000..5e44bb9f82e963c2378fc5c2a921412ffce256a1
--- /dev/null
+++ b/changes/bug2358
@@ -0,0 +1,5 @@
+  o Minor features
+    - Enable Address Space Layout Randomization (ASLR) and Data Execution
+      Prevention (DEP) by default on Windows to make it harder for
+      attackers to exploit vulnerabilities.  Patch from John Brooks.
+