diff --git a/debian/changelog b/debian/changelog
index 55244d376c1ef8481effab677ea94deaab4fb1bf..6dde1bb8e261ba326ba3b2a6b9e9659d5e7c4457 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,12 @@
+php-laravel-framework (6.20.14+dfsg-2+deb11u1) bullseye; urgency=high
+
+  * Fix security issue: XSS vulnerability in the Blade templating engine
+    (CVE-2021-43808, Closes: #1001333)
+  * Fix security issue: Failure to block the upload of executable PHP content
+    (CVE-2021-43617, Closes: #1002728)
+
+ -- Robin Gustafsson <robin@rgson.se>  Sun, 02 Jan 2022 19:58:35 +0100
+
 php-laravel-framework (6.20.14+dfsg-2) unstable; urgency=medium
 
   * Fix security issue: SQL injection with Microsoft SQL Server