diff --git a/ChangeLog b/ChangeLog
index 0caa5a3088..f963dfc2b1 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -49,8 +49,8 @@ phpMyAdmin - ChangeLog
 - issue        Fixed url.php crashing because it's not loading the DatabaseInterface service
 - issue #15540 Fixed uncaught TypeError: htmlspecialchars() in NavigationTree
 
-4.9.2 (not yet released)
-- issue #14184 Change the cookie name from phpMyAdmin to phpMyAdmin_https for HTTPS
+4.9.2 (2019-11-21)
+- issue #14184 Change the cookie name from phpMyAdmin to phpMyAdmin_https for HTTPS, fixes many "Failed to set session cookie" errors
 - issue #15304 Fix ssl_use php error
 - issue #14804 Fix undefined index: ssl_* variables
 - issue #14245 Fix mysql 8.0.3 and above fails on advisor
@@ -81,6 +81,8 @@ phpMyAdmin - ChangeLog
 - issue        Fix setting and removing display field on Designer
 - issue        Added a warning when trying to set a display field on Designer and configuration storage is not setup
 - issue #15327 Fix shift-click in Export misses a checkbox
+- issue        [security] Fix improperly sanitized data when showing the Git branch (thanks to Ali Hubail for this report)
+- issue        [security] Fix security weaknesses in Designer feature,including a flaw where an attacker could trigger an SQL injection attack (PMASA-2019-5)
 
 4.9.1 (2019-09-20)
 - issue #15313 Added support for Twig 2