Index: CHANGELOG.txt
===================================================================
RCS file: /cvs/drupal/drupal/CHANGELOG.txt,v
retrieving revision 1.117.2.9
diff -u -p -r1.117.2.9 CHANGELOG.txt
--- CHANGELOG.txt	5 Jan 2007 00:22:28 -0000	1.117.2.9
+++ CHANGELOG.txt	23 Jan 2007 18:04:21 -0000
@@ -93,6 +93,30 @@ Drupal 4.7.0, 2006-05-01
     * added support for a tolerant Base URL.
     * output URIs relative to the root, without a base tag.
 
+Drupal 4.6.11, 2007-01-05
+-------------------------
+- fixed security issue (XSS), see SA-2007-001
+- fixed security issue (DoS), see SA-2007-002
+
+Drupal 4.6.10, 2006-10-18
+------------------------
+- fixed security issue (XSS), see SA-2006-024
+- fixed security issue (CSRF), see SA-2006-025
+- fixed security issue (Form action attribute injection), see SA-2006-026
+
+Drupal 4.6.9, 2006-08-02
+------------------------
+- fixed security issue (XSS), see SA-2006-011
+
+Drupal 4.6.8, 2006-06-01
+------------------------
+- fixed critical upload issue, see SA-2006-007
+- fixed taxonomy XSS issue, see SA-2006-008
+
+Drupal 4.6.7, 2006-05-24
+------------------------
+- fixed critical SQL issue, see SA-2006-005
+
 Drupal 4.6.6, 2006-03-13
 ------------------------
 - fixed bugs, including 4 security vulnerabilities.