[Security] added a missing CHANGELOG enrty