--- a/CHANGELOG.txt	Tue Dec 23 14:32:55 2008 +0100
+++ b/CHANGELOG.txt	Thu Jan 15 10:15:56 2009 +0100
@@ -1,4 +1,18 @@
-// $Id: CHANGELOG.txt,v 1.253.2.20 2008/12/11 17:39:41 goba Exp $
+// $Id: CHANGELOG.txt,v 1.253.2.22 2009/01/14 23:34:06 goba Exp $
+
+Drupal 6.9, 2009-01-14
+----------------------
+- Fixed security issues, (Access Bypass, Validation Bypass and Hardening
+  against SQL injection), see SA-CORE-2009-001
+- Made HTTP request checking more robust and informative.
+- Fixed HTTP_HOST checking to work again with HTTP 1.0 clients and
+  basic shell scripts.
+- Removed t() calls from all schema documentation. Suggested best practice
+  changed for contributed modules, see http://drupal.org/node/322731.
+- Fixed a variety of small bugs.
+
+Drupal 6.9-dev, xxxx-xx-xx (development release)
+----------------------
 
 Drupal 6.8, 2008-12-11
 ----------------------
@@ -154,6 +168,13 @@
 - Removed old system updates. Updates from Drupal versions prior to 5.x will
   require upgrading to 5.x before upgrading to 6.x.
 
+Drupal 5.15, 2009-01-14
+----------------------
+- Fixed security issues, (Hardening against SQL injection), see SA-CORE-2009-001
+- Fixed HTTP_HOST checking to work again with HTTP 1.0 clients and
+  basic shell scripts.
+- Fixed a variety of small bugs.
+
 Drupal 5.14, 2008-12-11
 ----------------------
 - Removed a previous change incompatible with PHP 5.1.x and lower.