diff --git a/exim.changes b/exim.changes
index f8e9642..fcb393c 100644
--- a/exim.changes
+++ b/exim.changes
@@ -9,6 +9,7 @@ Sat Mar 23 05:03:11 UTC 2019 - seanlew@opensuse.org
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
+ * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
 - add workaround patch for compile time error on missing printf
   format annotation (gnu_printf.patch)