diff --git a/CHANGELOG.md b/CHANGELOG.md
index 872fb9c3..46784fd5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,16 @@
 # Changes
 
+## 0.6.3
+* Resolve [RUSTSEC-2020-0031](https://rustsec.org/advisories/RUSTSEC-2020-0031.html) by preventing
+  HTTP request smuggling enabled by our normalisation of header values.
+
+## 0.6.2
+* Remove deprecated use of `AsciiExt` trait.
+* Expose `with_chunked_threshold` on `Response` for configuring exactly when chunking should begin.
+
+## 0.6.0
+* Bump dependencies
+
 ## 0.5.9
 
 * Expanded and changed status code description mapping according to IANA registry:
diff --git a/Cargo.toml b/Cargo.toml
index d2ba7922..3f76dbe1 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "tiny_http"
-version = "0.6.2"
+version = "0.6.3"
 authors = ["pierre.krieger1708@gmail.com",
            "Corey Farwell <coreyf@rwell.org>"]
 description = "Low level HTTP server library"