Yes of course, should it follow this pattern then...
- Send an e-mail to the new address with a confirmation link.
- Send an e-mail to the old e-mail address with the option to revoke the change.
This way we can verify the new email address is correct but also alert the old email address in case the account has become compromised.