diff --git a/CHANGELOG.md b/CHANGELOG.md
index 622eb9676..292c7dd5b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,13 +9,18 @@ DEPRECATIONS/CHANGES:
 
 FEATURES:
 
+ * **Oracle Secret Backend**: There is now an external plugin to support leased
+   credentials for Oracle databases (distributed separately).
+ * **GCP IAM Auth Backend**: There is now an authentication backend that allows
+   using GCP IAM credentials to retrieve Vault tokens. This is available as
+   both a plugin and built-in to Vault.
+ * **PingID Push Support for Path MFA (Enterprise)**: PingID Push can now be
+   used for MFA with the new path-based MFA introduced in Vault Enterprise 0.8.
  * **Permitted DNS Domains Support in PKI**: The `pki` backend now supports
    specifying permitted DNS domains for CA certificates, allowing you to
    narrowly scope the set of domains for which a CA can issue or sign child
    certificates.
- * **PingID Push Support for Path MFA (Enterprise)**: PingID Push can now be
-   used for MFA with the new path-based MFA introduced in Vault Enterprise 0.8.
-
+ 
 IMPROVEMENTS:
 
  * auth/approle: Allow array input for policies in addition to comma-delimited