diff --git a/ChangeLog b/ChangeLog
index b120401..033c88d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,4 +1,8 @@
 Unreleased 1.6.6-dev
+	Bug fixes (security):
+	- Fix two use-after-free, a null pointer dereference and three
+	heap overflows. Patches by Stephen Röttger.
+
 	Bug fixes:
 	- Have rewriteIn for servers use the correct config section. We
 	used to apply rewriteIn using the rewrite block of the client