diff --git a/CHANGELOG b/CHANGELOG
index 896b0526..c0df8ac7 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,11 @@
+## 2.14.6
+
+- Increased test coverage (thanks Richard)
+- Fixed some newly discovered security issues in admin:
+  CSRF vulnerability in admin that allows disabling apps
+  Brute force password attack vulnerability in admin
+  (thanks Narendra and Leonel)  
+
 ## 2.14.1-5
 
 - fixed two major security issues that caused the examples app to leak information
diff --git a/Makefile b/Makefile
index fa3f4b4f..82f1020a 100644
--- a/Makefile
+++ b/Makefile
@@ -32,7 +32,7 @@ update:
 	echo "remember that pymysql was tweaked"
 src:
 	### Use semantic versioning
-	echo 'Version 2.14.5-stable+timestamp.'`date +%Y.%m.%d.%H.%M.%S` > VERSION
+	echo 'Version 2.14.6-stable+timestamp.'`date +%Y.%m.%d.%H.%M.%S` > VERSION
 	### rm -f all junk files
 	make clean
 	### clean up baisc apps
diff --git a/VERSION b/VERSION
index 95fd1071..3760b00f 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-Version 2.14.5-stable+timestamp.2016.04.13.22.22.13
+Version 2.14.6-stable+timestamp.2016.05.09.19.18.48