diff --git a/lz4.changes b/lz4.changes
index b6b6356..61d1cbf 100644
--- a/lz4.changes
+++ b/lz4.changes
@@ -11,6 +11,7 @@ Tue Oct 15 14:48:45 UTC 2019 - pgajdos@suse.com
   * decompression functions were reading a few bytes beyond input size
   * api: lz4frame initializers compatibility with c++, reported by @degski
   * cli : added command --list, based on a patch by @gabrielstedman
+  * fixes CVE-2019-17543 [bsc#1153936]
 
 -------------------------------------------------------------------
 Thu Jun  6 18:26:39 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
diff --git a/lz4.spec b/lz4.spec
index 7aa2015..4fb541e 100644
--- a/lz4.spec
+++ b/lz4.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package lz4
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -23,7 +23,7 @@ Release:        0
 Summary:        Hash-based Predictive Lempel–Ziv compressor
 License:        GPL-2.0-or-later AND BSD-2-Clause
 Group:          Productivity/Archiving/Compression
-Url:            https://lz4.github.io/lz4/
+URL:            https://lz4.github.io/lz4/
 
 #Git-Clone:	https://github.com/lz4/lz4
 Source:         https://github.com/lz4/lz4/archive/v%version.tar.gz#/%name-%version.tar.gz