diff --git a/caddy.changes b/caddy.changes
index b5d6d06..b3330fc 100644
--- a/caddy.changes
+++ b/caddy.changes
@@ -236,9 +236,13 @@ Tue May 28 00:06:54 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com>
   * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
   * cmd: upgrade: resolve symlink of the executable (#5891)
   * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)
+
 - Packaging improvements:
   * Update to BuildRequires: golang(API) >= 1.21 matching go.mod
 
+- CVEs:
+  * CVE-2024-22189 (bsc#1222468)
+  * CVE-2023-45142
 
 -------------------------------------------------------------------
 Sun Mar 31 12:39:10 UTC 2024 - Bernhard Wiedemann <bwiedemann@suse.com>