Update changelog.html

changelog.html

@@ -69,6 +69,9 @@ Upcoming changes</a>
   <li class=rfe>
     JNLP slaves can now connect to master through HTTP proxy.
     (<a href="https://issues.jenkins-ci.org/browse/JENKINS-6167">issue 21251</a>)
+  <li class='major bug'>
+    Fixes to several security vulnerabilities.
+    (<a href="https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-03-23">advisory</a>)
 </ul>
 <h3><a name=v1.605>What's new in 1.605</a> (2015/03/16)</h3>
 <ul class=image>