diff --git a/ChangeLog b/ChangeLog
index 4ffee2add8..3c6ff6a10a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,22 @@
+1.4rc1 2012-11-29
+
+- Interactive unix socket mode (#571, #552)
+- IP Reputation: loading and matching (#647)
+- Improved --list-keywords commandline option gives detailed info for supported keyword, including doc link (#435)
+- Rule analyzer improvement wrt ipv4/ipv6, invalid rules (#494)
+- User-Agent added to file log and filestore meta files (#629)
+- Endace DAG supports live stats and at exit drop stats (#638)
+- Add support for libhtp event "request port doesn't match tcp port" (#650)
+- Rules with negated addresses will not be considered IP-only (#599)
+- Rule reloads complete much faster in low traffic conditions (#526)
+- Suricata -h now displays all available options (#419)
+- Luajit configure time detection was improved (#636)
+- Flow manager mutex used w/o initialization (#628)
+- Cygwin work around for windows shell mangling interface string (#372)
+- Fix a Prelude output crash with alerts generated by rules w/o classtype or msg (#648)
+- CLANG compiler build fixes (#649)
+- Several fixes found by code analyzers
+
 1.4beta3 2012-11-14
 
 - support for Napatech cards was greatly improved by Matt Keeler from Npulse (#430, #619)