diff --git a/ChangeLog b/ChangeLog
index d0bee0819..a2f95d9f3 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -188,6 +188,9 @@ danbarry
 - patch #2115966 [GUI] Checkboxes and IE 7, thanks to Martin - maschg 
 - bug #1914066 [core] ForceSSL generates incorrectly escaped redirections 
 
+2.11.9.4 (2008-12-09)
+- [security] possible XSRF on several pages
+
 2.11.9.3 (2008-10-30)
 - [security] XSS in a Designer component