diff --git a/expat/Changes b/expat/Changes
index 09d55b54..c3c8055f 100644
--- a/expat/Changes
+++ b/expat/Changes
@@ -1,3 +1,17 @@
+Release 2.1.1 TODO_FILL_DATE
+        Security fixes:
+            #582: CVE-2015-1283 - Multiple integer overflows in XML_GetBuffer
+
+        Bug fixes:
+            #520: Symbol XML_SetHashSalt was not exported
+            Output of "xmlwf -h" was incomplete
+
+        Other changes
+            #503: Document behavior of calling XML_SetHashSalt with salt 0
+            Minor improvements to man page xmlwf(1)
+            Improvements to the experimental CMake build system
+            libtool now invoked with --verbose
+
 Release 2.1.0 Sat March 24 2012
         - Bug Fixes:
           #1742315: Harmful XML_ParserCreateNS suggestion.
diff --git a/htdocs/index.html b/htdocs/index.html
index c576518a..99fc5fcd 100644
--- a/htdocs/index.html
+++ b/htdocs/index.html
@@ -51,6 +51,32 @@ of Expat.</p>
 <h3 id="news">News</h3>
 
 <dl>
+  <dt><em>TODO_FILL_DATE</em>,
+      Expat 2.1.1 released.
+    </dt>
+  <dd><p>Release 2.1.1 includes security &amp; other bug fixes.</p>
+    <h4>Security fixes</h4>
+    <ul>
+      <li><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283">CVE-2015-1283</a>
+      &mdash;
+      Multiple integer overflows in the <code>XML_GetBuffer</code> function
+      (<a href="https://sourceforge.net/p/expat/bugs/528/">bug 528</a>)</li>
+    </ul>
+    <h4>Bug fixes</h4>
+    <ul>
+      <li>Symbol <code>XML_SetHashSalt</code> was not exported
+      (<a href="https://sourceforge.net/p/expat/bugs/520/">bug 520</a>)</li>
+      <li>Output of <code>xmlwf -h</code> was incomplete</li>
+    </ul>
+    <h4>Other changes</h4>
+    <ul>
+      <li>Document behavior of calling <code>XML_SetHashSalt</code> with salt <code>0</code>
+      (<a href="https://sourceforge.net/p/expat/bugs/503/">bug 503</a>)</li>
+      <li>Minor improvements to man page <code>xmlwf(1)</code></li>
+      <li>Improvements to the <em>experimental</em> CMake build system</li>
+      <li>libtool now invoked with <code>--verbose</code></li>
+    </ul>
+  </dd>
   <dt><em>24 March 2012</em>,
       Expat 2.1.0 released.
     </dt>