diff --git a/CHANGELOG b/CHANGELOG
index f4ae65ee6..3c5f63f4b 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,6 +1,6 @@
 # Nmap Changelog ($Id$); -*-text-*-
 
-Nmap 6.20BETA1 [2012-11-15]
+Nmap 6.20BETA1 [2012-11-16]
 
 o Integrated all of your IPv4 OS fingerprint submissions since January
   (more than 3,000 of them).  Added 373 fingerprints, bringing the new
@@ -459,6 +459,10 @@ o Scans that use OS sockets (including TCP connect scan, version
   detection, and script scan) now use the SO_BINDTODEVICE sockopt on
   Linux, so that the -e option is honored. [David Fifield]
 
+o [Zenmap] Host filters can now do negative matching, for example you
+  could use "os:!linux" to match hosts NOT detectes as Linux. [Daniel
+  Miller]
+
 o Fixed a bug that caused an incorrect source address to be set when
   scanning certain addresses (apparently those ending in .0) on
   Windows XP. The symptom of this bug was the messages
@@ -497,6 +501,9 @@ o Fixed a bug that prevented Nmap from finding any interfaces when one
   interfaces operating in access point mode. This bug was reported by
   Sebastiaan Vileijn. [Djalal Harouni]
 
+o Updated the Zenmap desktop icons on Windows, Linux, and Mac with higher
+  resolution ones. [Sean Rivera, David Fifield]
+
 o [NSE] Script results for a host or service are now sorted
   alphabetically by script name. [Sean Rivera]
 
@@ -654,6 +661,9 @@ o Made the various Makefiles' treatment of makefile.dep uniform:
   "make clean" keeps the file and "make distclean" deletes it.
   [Michael McTernan]
 
+o [NSE] Fixed dozens of scripts and libraries to work better on
+  system which don't have OpenSSL available. [Patrik Karlsson]
+
 o [Ncat] --output logging now works in UDP mode. Thanks to Michal
   Hlavinka for reporting the bug. [David Fifield]