diff --git a/CHANGELOG b/CHANGELOG
index dd5f1d39c..9cb5ffbf1 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,6 @@
+2019-01-08  v3.6.11 fix security issue in 'rsync' (bundle helper); see commit
+                    5df2b81 for more
+
 2018-09-30  v3.6.10 fix up boo-boo caused by previous release; see mails on
                     list for details