diff --git a/CHANGES b/CHANGES
index 9afcc4ab78..38b8e5b033 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,54 @@
+2021.02.2, not yet released
+
+	Important / security related fixes.
+
+	Toolchain: Add logic to mark toolchains affected by binutils
+	bug 27597 (Nios II).
+
+	support/scripts/cve.py: Use the (significantly) faster yajl2
+	ijson backend for older (< 2.5) ijson versions rather than the
+	slow python default, speeding up pkg-stats by ~2x.
+
+	CMake infrastructure: Use CMAKE_EXE_LINKERFLAGS rather than
+	CMAKE_CXX_FLAGS to link with libatomic to fix an compatibility
+	issue with poppler.
+
+	Infrastructure: Expose CONFIG_DIR to post-build/post-image
+	scripts, so they can call the Buildroot Makefile in the
+	correct directory for both in-tree / out-of-tree builds.
+
+	Updated/fixed packages: at91bootstrap, avahi, bash, bind,
+	bridge-utils, cegui, cifs-utils, clamav, cmake, coremark-pro,
+	coreutils, cryptsetup, dmalloc, dnsmasq, docker-cli,
+	docker-engine, domoticz, efl, exim, ffmpeg, flex, gcc,
+	genext2fs, go, gst1-interpipe, haproxy, hostapd, i2c-tools,
+	imx-vpu, kexec, kf5-kcoreaddons, kismet, libcamera, libcurl,
+	libdrm, libfreefare, libfuse3, libgeos, libgpiod, libnpupnp,
+	libopenssl, libp11, librsync, libtomcrypt, libupnp, localedef,
+	lxc, m4, makedevs, mender, mesa3d, mesa3d-headers, mkpasswd,
+	mkpimage, modem-manager, monkey, mpd, ncurses, nettle,
+	network-manager, nginx, numactl, openjdk, openjdk-bin,
+	openldap, openvpn, php, pipewire, python-aioconsole,
+	python-asgiref, python-botocore, python-django,
+	python-dnspython, python-flup, python-httplib2,
+	python-markdown2, python-mbrstrdecoder, python3, quickjs,
+	readline, rsyslog, ruby, samba4, sconeserver, snort, sox,
+	systemd, tar, timescaledb, tio, tor, usb_modeswitch,
+	wpa_supplicant, xdriver_xf86-video-ati, xen, xlib_libXaw,
+	xserver_xorg-server
+
+	Issues resolved (http://bugs.uclibc.org):
+
+	#13271: systemd-resolved: /etc/resolv.conf link broken on per-pa..
+	#13551: 2021.02.rc2: Unicode not work on qt 5.15.2
+	#13651: pkg-golang cannot build when main.go is in the root
+	#13661: host-python2 build fails on aarch64
+	#13721: c-stack.c:55:26: error: missing binary operator before ..
+	#13731: Readline Patch is missing Author Information
+	#13741: genext2fs does not allow to set perms of root node
+	#13751: libopenssl (static): huge drop in performance in newer ..
+	#13771: package htop has undeclared dependency on host python
+
 2021.02.1, released April 7, 2021
 
 	Important / security related fixes.