diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 36c3c6c..00a2305 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -43,6 +43,11 @@
   </properties>
 
   <body>
+    <release version="1.4" date="TBA" description=
+"TBA">
+      <action dev="sebb" type="update" due-to="Ville Skyttä">Make some MultipartStream private fields final</action>
+    </release>
+
     <release version="1.3.1" description=
 "This is a security and maintenance release that includes an important security 
 fix as well as a small number of bugfixes." date="TBD">
diff --git a/src/main/java/org/apache/commons/fileupload/MultipartStream.java b/src/main/java/org/apache/commons/fileupload/MultipartStream.java
index c3fda41..514bebc 100644
--- a/src/main/java/org/apache/commons/fileupload/MultipartStream.java
+++ b/src/main/java/org/apache/commons/fileupload/MultipartStream.java
@@ -222,12 +222,12 @@
      * The amount of data, in bytes, that must be kept in the buffer in order
      * to detect delimiters reliably.
      */
-    private int keepRegion;
+    private final int keepRegion;
 
     /**
      * The byte sequence that partitions the stream.
      */
-    private byte[] boundary;
+    private final byte[] boundary;
 
     /**
      * The length of the buffer used for processing the request.