diff --git a/CHANGELOG.md b/CHANGELOG.md
index fefac179c0543d..1bc75ae43cfdeb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -28,7 +28,8 @@ release.
-11.10.0
+11.10.1
+11.10.0
11.9.0
11.8.0
11.7.0
diff --git a/doc/changelogs/CHANGELOG_V11.md b/doc/changelogs/CHANGELOG_V11.md
index 346fc6a07c4c75..52878539c65687 100644
--- a/doc/changelogs/CHANGELOG_V11.md
+++ b/doc/changelogs/CHANGELOG_V11.md
@@ -9,6 +9,7 @@
|
+11.10.1
11.10.0
11.9.0
11.8.0
@@ -37,6 +38,27 @@
* [io.js](CHANGELOG_IOJS.md)
* [Archive](CHANGELOG_ARCHIVE.md)
+
+## 2019-02-28, Version 11.10.1 (Current), @rvagg
+
+This is a security release. All Node.js users should consult the security release summary at:
+
+ https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/
+
+for details on patched vulnerabilities.
+
+A fix for the following CVE is included in this release:
+
+ * Node.js: Slowloris HTTP Denial of Service with keep-alive (CVE-2019-5737)
+
+### Notable Changes
+
+* **http**: Further prevention of "Slowloris" attacks on HTTP and HTTPS connections by consistently applying the receive timeout set by `server.headersTimeout` to connections in keep-alive mode. Reported by Marco Pracucci ([Voxnest](https://voxnest.com)). (CVE-2019-5737 / Matteo Collina)
+
+### Commits
+
+* [[`05534a24ca`](https://github.com/nodejs/node/commit/05534a24ca)] - **http**: prevent slowloris with keepalive connections (Matteo Collina) [nodejs-private/node-private#158](https://github.com/nodejs-private/node-private/pull/158)
+
## 2019-02-14, Version 11.10.0 (Current), @targos
|