diff --git a/src/releases/seamonkey1.1.10/changelog.en.html b/src/releases/seamonkey1.1.10/changelog.en.html
index 4e37d4c17f223714d9562fee0fe778d789f89403_c3JjL3JlbGVhc2VzL3NlYW1vbmtleTEuMS4xMC9jaGFuZ2Vsb2cuZW4uaHRtbA==..d6358ab488f9b48a16b2871f4590ef31c7a33dee_c3JjL3JlbGVhc2VzL3NlYW1vbmtleTEuMS4xMC9jaGFuZ2Vsb2cuZW4uaHRtbA== 100644
--- a/src/releases/seamonkey1.1.10/changelog.en.html
+++ b/src/releases/seamonkey1.1.10/changelog.en.html
@@ -45,6 +45,9 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=323508">323508</a> Favicon (error icon) in Bookmark not updated
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=334514">334514</a> FrameArena::~FrameArena should assert that it's empty
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=347367">347367</a> crash when print preview is opened on a certain file styled with meda=print [@ BasicTableLayoutStrategy::CalcPctAdjTableWidth]
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=356378">356378</a> &quot;invalid getter usage&quot; or assertion failure with &quot;var x; x getter= function () { };&quot;
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=371292">371292</a> Crash [@ js_AtomToPrintableString]
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=378027">378027</a> Printing crash [@ nsCellMap::GetCellInfoAt] Exception: EXC_BAD_INSTRUCTION (0x0002)
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=380833">380833</a> Crash during GC after uneval (involves E4X, mysterious sharp variable)
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=390295">390295</a> Searchplugin with digit in url cuts off url
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=390788">390788</a> Accessing innerWidth of a tabbrowser contentWindow throws NS_ERROR_XPC_SECURITY_MANAGER_VETO
@@ -48,5 +51,7 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=380833">380833</a> Crash during GC after uneval (involves E4X, mysterious sharp variable)
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=390295">390295</a> Searchplugin with digit in url cuts off url
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=390788">390788</a> Accessing innerWidth of a tabbrowser contentWindow throws NS_ERROR_XPC_SECURITY_MANAGER_VETO
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=391178">391178</a> Crash [@ nsCSSFrameConstructor::FindFrameWithContent] with XUL trees, position:fixed
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=397093">397093</a> Faulty .properties file results in uninitialized memory being used
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=401188">401188</a> Thread-unsafe updates to sub-atomic rt-&gt;gc{Poke,Zeal}
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=403059">403059</a> Dropdown list for &quot;File Selected Message&quot; is double spaced; arrows are missing.
@@ -51,7 +56,9 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=401188">401188</a> Thread-unsafe updates to sub-atomic rt-&gt;gc{Poke,Zeal}
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=403059">403059</a> Dropdown list for &quot;File Selected Message&quot; is double spaced; arrows are missing.
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=411433">411433</a> file location URL in directory listing should be HTML escaped
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=413161">413161</a> nsIPrincipal needs a stricter origin
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=414982">414982</a> Use gcZeal setting in nsJSEnvironment, as we once did with WAY_TOO_MUCH_GC
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=416282">416282</a> Seamonkey/xpfe needs patch for bug 376473
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=416751">416751</a> rich text editor no longer in designmode when navigating back
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=417957">417957</a> Setting mail.auth_login and mail.server.default.auth_login to false breaks IMAP after restart
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=417994">417994</a> navigator object does not fully reflect user agent settings
@@ -53,7 +60,9 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=414982">414982</a> Use gcZeal setting in nsJSEnvironment, as we once did with WAY_TOO_MUCH_GC
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=416282">416282</a> Seamonkey/xpfe needs patch for bug 376473
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=416751">416751</a> rich text editor no longer in designmode when navigating back
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=417957">417957</a> Setting mail.auth_login and mail.server.default.auth_login to false breaks IMAP after restart
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=417994">417994</a> navigator object does not fully reflect user agent settings
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=418128">418128</a> Yet another GC hazard with ++/-- in js_Interpret
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=418356">418356</a> [FIX]It's unsafe to use mozIJSSubScriptLoader.loadSubScript() with non-chrome urls or chrome urls whose scheme/host part contain uppercase characters
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=418645">418645</a> Visible Region Notify message does not work when scrolling client window
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=419350">419350</a> [ia64] build failure using gcc 4.3
@@ -58,8 +67,9 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=418645">418645</a> Visible Region Notify message does not work when scrolling client window
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=419350">419350</a> [ia64] build failure using gcc 4.3
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=419846">419846</a> Non-chrome XUL documents can load chrome scripts from the fastload file
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=421622">421622</a> XMLHttpRequest from chrome content clears Referer header
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=421689">421689</a> Mozilla won't build with XCode 3.1
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=421715">421715</a> canvas.2dcontext.putImageData(array[undefined]) causes a crash [@ JS_GetProperty]
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=422118">422118</a> Crash reading malformed zip [@nsZipArchive::BuildFileList]
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=423042">423042</a> js.c Print should flush
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=423182">423182</a> changes the default MOZ_ZIP_FORMAT from .tar.gz to .zip
@@ -60,10 +70,11 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=421622">421622</a> XMLHttpRequest from chrome content clears Referer header
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=421689">421689</a> Mozilla won't build with XCode 3.1
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=421715">421715</a> canvas.2dcontext.putImageData(array[undefined]) causes a crash [@ JS_GetProperty]
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=422118">422118</a> Crash reading malformed zip [@nsZipArchive::BuildFileList]
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=423042">423042</a> js.c Print should flush
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=423182">423182</a> changes the default MOZ_ZIP_FORMAT from .tar.gz to .zip
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=423541">423541</a> Arbitrary file upload via originalTarget and DOM Range
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=424291">424291</a> Crash [@ nsCellMap::SetNextSibling] while trying to print
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=425576">425576</a> Crash on login to Excite Japan Blog (exblog.jp) after updating to Firefox 2.0.0.13 [@ js_MarkGCThing]
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=425594">425594</a> new branch top crash [@ js_GC] maybe also crash [@ js_MarkGCThing][@js_GetGCThingFlags]
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=426628">426628</a> Land dynamic gczeal on 1.8 branch
@@ -66,7 +77,8 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=424291">424291</a> Crash [@ nsCellMap::SetNextSibling] while trying to print
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=425576">425576</a> Crash on login to Excite Japan Blog (exblog.jp) after updating to Firefox 2.0.0.13 [@ js_MarkGCThing]
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=425594">425594</a> new branch top crash [@ js_GC] maybe also crash [@ js_MarkGCThing][@js_GetGCThingFlags]
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=426628">426628</a> Land dynamic gczeal on 1.8 branch
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=427185">427185</a> JS Assertion from hell with gczeal 2
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=427216">427216</a> Make tools menu popup match other applications
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=428606">428606</a> New version of JEP (0.9.6.4), please land on trunk and branch
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=428669">428669</a> Crash testcase for bug 425576
@@ -70,4 +82,5 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=427216">427216</a> Make tools menu popup match other applications
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=428606">428606</a> New version of JEP (0.9.6.4), please land on trunk and branch
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=428669">428669</a> Crash testcase for bug 425576
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=428672">428672</a> XSS using an event handler attached to the outer window
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=429731">429731</a> Changing new tab preference to home page in new profile results in chrome://navigator-region/locale/region.properties
@@ -73,2 +86,3 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=429731">429731</a> Changing new tab preference to home page in new profile results in chrome://navigator-region/locale/region.properties
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=430814">430814</a> Crash [@ nsStyleContext::GetStyleDisplay] while trying to print
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=431184">431184</a> Composer badly handles XHTML documents
@@ -74,3 +88,4 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=431184">431184</a> Composer badly handles XHTML documents
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=431489">431489</a> js_DecompileCode should not print if Decompile failed
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=431819">431819</a> IMAP/POP/SMTP/LDAP with SSL client auth, Thunderbird repeatedly prompts for client certificate
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=432311">432311</a> branch landing of bug#351476 (conversion of line endings in browser/EULA)
@@ -75,5 +90,7 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=431819">431819</a> IMAP/POP/SMTP/LDAP with SSL client auth, Thunderbird repeatedly prompts for client certificate
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=432311">432311</a> branch landing of bug#351476 (conversion of line endings in browser/EULA)
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=432591">432591</a> Fix for bug 428672 can be circumvented by using XUL element
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=433328">433328</a> XSS using &lt;script&gt; element in unloaded document
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=436575">436575</a> Moz apps experience unkillable hangs after installing Mac OS X 10.5.3 (loading VerifiedDownloadPlugin.plugin)
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=436670">436670</a> default color constants should be vars in EdColorProps.js
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=438941">438941</a> Update SeaMonkey version number on GECKO181_20080612_RELBRANCH
@@ -77,6 +94,8 @@
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=436575">436575</a> Moz apps experience unkillable hangs after installing Mac OS X 10.5.3 (loading VerifiedDownloadPlugin.plugin)
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=436670">436670</a> default color constants should be vars in EdColorProps.js
 <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=438941">438941</a> Update SeaMonkey version number on GECKO181_20080612_RELBRANCH
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=439735">439735</a> exploitable crash at nsBlockFrame::DrainOverflowLines
+<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=440308">440308</a> XSS by using XMLHttpRequest and onreadystatechange handler
 </pre>
 </body>
 </html>