Update CHANGELOG

Signed-off-by: Cedric Alfonsi <cedric@passbolt.com>

CHANGELOG.md

@@ -4,26 +4,32 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [unreleased]
 
-## [2.11.0] - 2019-08-07
-### Added
-- Groundwork to support multiple openpgp backends
-
-### Improved
-- PB-391: As an admin deleting a user I should see the name and email of the user i'm about the delete in the model dialog
-- PB-396: As a user deleting a password I should see the name of the password i’m about to delete in the modal
-- PB-397: As a user in the user workspace, I should see a relevant feedback if a user is not a member of any group
-- PB-505: Upgrade CakePHP (3.8.0)
-- PB-533: PB-533 Implement /auth/is-authenticated to check if the user authenticated status without extending the session
-- PB-601: Added test to check which data is saved for "add favorite" endpoint and check if resource endpoint is CSRF protected.
-- PB-242: Performance - Fetch the passwords in priority
-- Extend resource checkbox clickable area
-- Select automatically the resource which has been created
-- Unselect the select all checkbox if all passwords are not selected
-
-### Fixed
-- PB-427: The email sender shell task shouldn't have to access the organization_settings table to send emails
-- Fix reload button javascript on setup start page
-- Fix an admin can trigger a XSS during setup with malicious firstname
+## [2.11.0] - 2019-08-08
+### Security fixes
+- PB-661: Fix tab nabbing when clicking on "open in a new tab" in password grid
+- PB-607: Fix XSS on first name or last name during setup
+
+### Improvements
+- PB-587: Add baseline support for multiple openpgp backends
+- PB-391: Display the name and email of the user an admin is going to delete in the delete dialog
+- PB-396: Display the label of the password a user is going to delete in the delete dialog
+- PB-397: Display a relevant feedback in the user details group section if the user is not member of any group
+- PB-533: Add a new session check endpoint that does not extend the session expiry
+- PB-607: Add option for an administrator to configure CSP using environment variable
+- PB-242: Improve the passwords grid (passwords fetch peformance, search reactivity, selectbox area enlarged)
+
+### Fixes
+- PB-349: Fix health check fails if using custom GNUPGHOME env set by application
+- PB-330: Fix migration issue from CE to PRO in v2.10
+- PB-567: Fix appjs auto logout
+- PB-601: Fix some incomplete unit tests
+- PB-427: Fix email sender shell task and organization settings table unnecessary coupling
+- PB-349: Fix OpenPGP results health checks
+
+### Maintenance
+- PB-505: Upgrade cake 3.8
+- PB-504: Upgrade Javascript dependencies
+- PB-472: Cleanup test dependencies
 
 ## [2.10.0] - 2019-05-15
 ### Added