ChangeLog entries for security fixes