diff --git a/gpg2.changes b/gpg2.changes
index 118b23e..bdc45f4 100644
--- a/gpg2.changes
+++ b/gpg2.changes
@@ -10,7 +10,7 @@ Fri Jun  8 12:52:39 UTC 2018 - kbabioch@suse.com
     cipher algorithm or any preferences.  For testing --rfc2440 can be
     used to create a message without an MDC.
   * gpg: Sanitize the diagnostic output of the original file name in
-    verbose mode.
+    verbose mode (bsc#1096745, CVE-2018-12020)
   * gpg: Detect suspicious multiple plaintext packets in a more reliable way.
   * gpg: Fix the duplicate key signature detection code.
   * gpg: The options --no-mdc-warn, --force-mdc, --no-force-mdc,