diff --git a/changelog.md b/changelog.md
index a65b5c5a4af..0c3e7b6d514 100644
--- a/changelog.md
+++ b/changelog.md
@@ -2,7 +2,11 @@
 
 ## 0.12.0~rc1
 
+## 0.11.1
 
+### Operations
+
+* Security bugfix: Upgrade apt without following redirects on first install, addresses CVE-2019-3462 (#4061)
 
 ## 0.11.0
 
diff --git a/install_files/securedrop-app-code/usr/share/doc/securedrop-app-code/changelog.Debian b/install_files/securedrop-app-code/usr/share/doc/securedrop-app-code/changelog.Debian
index de2ba97481f..32667aed877 100644
--- a/install_files/securedrop-app-code/usr/share/doc/securedrop-app-code/changelog.Debian
+++ b/install_files/securedrop-app-code/usr/share/doc/securedrop-app-code/changelog.Debian
@@ -4,6 +4,12 @@ securedrop-app-code (0.12.0~rc1) trusty; urgency=medium
 
  -- SecureDrop Team <securedrop@freedom.press>  Thu, 13 Dec 2018 02:02:05 +0000
 
+securedrop-app-code (0.11.1) trusty; urgency=medium
+
+  * See changelog.md
+
+ -- SecureDrop Team <securedrop@freedom.press>  Thu, 24 Jan 2019 01:08:49 +0000
+
 securedrop-app-code (0.11.0) trusty; urgency=medium
 
   * See changelog.md 
diff --git a/molecule/shared/stable.ver b/molecule/shared/stable.ver
index d9df1bbc0c7..af88ba82486 100644
--- a/molecule/shared/stable.ver
+++ b/molecule/shared/stable.ver
@@ -1 +1 @@
-0.11.0
+0.11.1