diff --git a/CHANGELOG.md b/CHANGELOG.md
index 578adcd6f..9d0cce057 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog
 
-## v6.1.0-rc.1
+## v6.1.0
 
 ### IMPORTANT NOTES
 
@@ -11,6 +11,11 @@
     * Views use a *Session ID* generated by the web browser instead of using the request IP (former behavior can be restored in YAML config)
     * The goal of this change is to get closer to how other video platforms like Mux, Vimeo, or Instagram work
 
+### SECURITY
+
+  * Compact ActivityPub JSON-LD objects before using them to prevent incorrect access control @tesaguri
+  * Protect ActivityPub information related to private/internal/blocked videos
+
 ### Admin config (non-exhaustive)
 
   * **Breaking changes**:
@@ -127,6 +132,9 @@
   * Fix view endpoint crash on geoip update failure
   * Fix setting video subtitle from URL query
   * Fix selecting "Display all languages/categories/licences" in videos search resulting in an empty search
+  * Fix followers/following counter of local ActivityPub actors
+  * Fix notification button link on mobile
+  * Fix player subtitles on iOS
 
 
 ## v6.0.4