update changelog with security fixes