From 081ec4a41892f88447ba8b577c15239c8cb40d5f Mon Sep 17 00:00:00 2001
From: Jordi Boggiano <j.boggiano@seld.be>
Date: Fri, 29 Sep 2023 10:54:39 +0200
Subject: [PATCH] Update changelog

---
 CHANGELOG.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6a995875a..44f195176 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,6 @@
-### [2.6.4] 2023-09-xx
+### [2.6.4] 2023-09-29
 
+  * Security: Fixed possible remote code execution vulnerability if composer.phar is publicly accessible, executable as PHP, and register_argc_argv is enabled in php.ini (GHSA-jm6m-4632-36hf / CVE-2023-43655)
   * Fixed json output of abandoned packages in audit command (#11647)
   * Performance improvement in pool optimization step (#11638)
   * Performance improvement in `show -a <packagename>` (#11659)