diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index b287fd8..464e675 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -15,6 +15,9 @@ Sat Nov  9 16:26:41 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>
   * Remote content notifications were broken with encrypted messages
   * Updating criteria of a saved search resulted in poor search performance
   * Drop-downs may not work in some places
+  MFSA 2024-61
+  * CVE-2024-11159 (bmo#1925929)
+    Potential disclosure of plaintext in OpenPGP encrypted message
 - remove kmozillahelper support (boo#1226112)
   * removed mozilla-kde.patch
   * requires xdg-desktop-portal instead