Update ChangeLog. Give attribution to Google's Security Team