Updated ChangeLog.

CHANGELOG.md

@@ -1,6 +1,12 @@
 # Upcoming Wekan release
 
-This release adds the following updates:
+This release fixes the following CRITICAL SECURITY ISSUES:
+
+- [Fixed SMTP password visible to Admin at Admin Panel by using browser inspect
+  to see behind asterisks](https://github.com/wekan/wekan/commit/71725f1b262b385162b2544f10658a0bc22f6b41).
+  Thanks to Georg Krause and xet7.
+
+and adds the following updates:
 
 - [Update wekan/releases/up.sh script: Can not build ppc64le version because OpenPower Minicloud
   is having emergency maintenance](https://github.com/wekan/wekan/commit/a43736b5c6196c65770d8ae17af927406dce2c43).