update Changelog about security fixes