diff --git a/ChangeLog b/ChangeLog
index 31a677ba3..7eb8919d4 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -198,6 +198,9 @@ danbarry
 - patch #2115966 [GUI] Checkboxes and IE 7, thanks to Martin - maschg 
 - bug #1914066 [core] ForceSSL generates incorrectly escaped redirections 
 
+2.11.9.4 (2008-12-09)
+- [security] possible XSRF on several pages
+
 2.11.9.3 (2008-10-30)
 - [security] XSS in a Designer component