diff --git a/CHANGELOG.md b/CHANGELOG.md
index e3fe16e6..7f8d6b8e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,10 @@
   - BBRF103 / RX666 / RX888 devices supported by libsddc
   - Devices using the EB200 protocol
 
+**0.20.2**
+- Fix a security problem that allowed arbitrary commands to be executed on the receiver
+  ([See github issue #215](https://github.com/jketterl/openwebrx/issues/215))
+
 **0.20.1**
 - Remove broken OSM map fallback
 
diff --git a/debian/changelog b/debian/changelog
index e1972360..75170139 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -17,6 +17,14 @@ openwebrx (0.21.0) UNRELEASED; urgency=low
 
  -- Jakob Ketterl <jakob.ketterl@gmx.de>  Sun, 11 Oct 2020 21:12:00 +0000
 
+openwebrx (0.20.2) buster focal; urgency=high
+
+  * Fix a security problem that allowed arbitrary commands to be executed on
+    the receiver (See github issue #215:
+    https://github.com/jketterl/openwebrx/issues/215)
+
+ -- Jakob Ketterl <jakob.ketterl@gmx.de>  Sun, 24 Jan 2021 22:50:00 +0000
+
 openwebrx (0.20.1) buster focal; urgency=low
 
   * Remove broken OSM map fallback