Index: CHANGELOG.TXT
===================================================================
RCS file: /cvs/drupal/CHANGELOG.TXT,v
diff -u -p CHANGELOG.TXT
--- CHANGELOG.TXT	Fri Jan 05 00:22:28 2007
+++ CHANGELOG.TXT	Tue Jan 23 16:37:06 2007
@@ -92,6 +92,30 @@
 - HTTP handling:
     * added support for a tolerant Base URL.
     * output URIs relative to the root, without a base tag.
+
+Drupal 4.6.11, 2007-01-05
+-------------------------
+- fixed security issue (XSS), see SA-2007-001
+- fixed security issue (DoS), see SA-2007-002
+
+Drupal 4.6.10, 2006-10-18
+------------------------
+- fixed security issue (XSS), see SA-2006-024
+- fixed security issue (CSRF), see SA-2006-025
+- fixed security issue (Form action attribute injection), see SA-2006-026
+
+Drupal 4.6.9, 2006-08-02
+------------------------
+- fixed security issue (XSS), see SA-2006-011
+
+Drupal 4.6.8, 2006-06-01
+------------------------
+- fixed critical upload issue, see SA-2006-007
+- fixed taxonomy XSS issue, see SA-2006-008
+
+Drupal 4.6.7, 2006-05-24
+------------------------
+- fixed critical SQL issue, see SA-2006-005
 
 Drupal 4.6.6, 2006-03-13
 ------------------------