diff --git a/CHANGELOG.md b/CHANGELOG.md
index ca51abd12b..9b440154af 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,10 +13,15 @@ different versioning scheme, following the Haskell community's
 
 ## Unreleased ##
 * IDL core version: TBD
-* C++ version: TBD
+* C++ version: bug fix bump needed
 * C# NuGet version: bug fix bump needed
 * `gbc` & compiler library: TBD
 
+### C++ ###
+
+* gbc is now installed with 555 (r-xr-xr-x) permissions. ([Issue
+  \#1062](https://github.com/microsoft/bond/issues/1062))
+
 ### C# ###
 
 * Fixed a regression writing to non-seekable streams using
diff --git a/compiler/CMakeLists.txt b/compiler/CMakeLists.txt
index 65ac69ec62..c8d06afddd 100644
--- a/compiler/CMakeLists.txt
+++ b/compiler/CMakeLists.txt
@@ -128,7 +128,7 @@ if(NOT BOND_SKIP_GBC_TESTS)
 endif()
 
 install (FILES ${output}
-    PERMISSIONS OWNER_EXECUTE GROUP_EXECUTE WORLD_EXECUTE
+    PERMISSIONS OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE
     DESTINATION bin)
 
 install (FILES ${completion}