diff --git a/Botan.changes b/Botan.changes
index 3735031..b678af5 100644
--- a/Botan.changes
+++ b/Botan.changes
@@ -4,7 +4,7 @@ Wed Nov 24 20:02:41 UTC 2021 - Dirk Müller <dmueller@suse.com>
 - update to 2.18.2:
   * Avoid using short exponents when encrypting in ElGamal, as some PGP
     implementations generate keys with parameters that are weak when
-    short exponents are used
+    short exponents are used CVE-2021-40529 boo#1190244
   * Fix a low risk OAEP decryption side channel
   * Work around a miscompilation of SHA-3 caused by a bug in Clang 12
     and XCode 13