diff --git a/ChangeLog b/ChangeLog
index 2cadc5ed63..112e133eb5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -72,7 +72,15 @@ phpMyAdmin - ChangeLog
 - issue #11854 Undefined property: stdClass::$releases at version check when disabled in config
 - issue #11814 SQL comment and variable stripped from bookmark on save
 - issue        Gracefully handle errors in regex based javascript search
-- issue        [Security] PMASA-2016-1, PMASA-2016-2, PMASA-2016-3, PMASA-2016-4, PMASA-2016-5, PMASA-2016-6, PMASA-2016-7, PMASA-2016-8, PMASA-2016-9
+- issue        [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-1
+- issue        [Security] Unsafe generation of CSRF token, see PMASA-2016-2
+- issue        [Security] Multiple XSS vulnerabilities, see PMASA-2016-3
+- issue        [Security] Insecure password generation in JavaScript, see PMASA-2016-4
+- issue        [Security] Unsafe comparison of CSRF token, see PMASA-2016-5
+- issue        [Security] Multiple full path disclosure vulnerabilities, see PMASA-2016-6
+- issue        [Security] XSS vulnerability in normalization page, see PMASA-2016-7
+- issue        [Security] Full path disclosure vulnerability in SQL parser, see PMASA-2016-8
+- issue        [Security] XSS vulnerability in SQL editor, see PMASA-2016-9
 
 4.5.3.1 (2015-12-25)
 - issue #11774 Undefined offset 2