diff --git a/ChangeLog b/ChangeLog
index 1688db3a5..0c5b64450 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -293,6 +293,10 @@ danbarry
 - patch #2115966 [GUI] Checkboxes and IE 7, thanks to Martin - maschg 
 - bug #1914066 [core] ForceSSL generates incorrectly escaped redirections 
 
+2.11.9.5 (2009-03-24)
+- [security] XSS vulnerability on export page
+- [security] Insufficient output sanitizing when generating configuration file
+
 2.11.9.4 (2008-12-09)
 - [security] possible XSRF on several pages