diff --git a/libraw.changes b/libraw.changes
index 6c6bb3a..0e96289 100644
--- a/libraw.changes
+++ b/libraw.changes
@@ -2,10 +2,11 @@
 Wed Sep 13 10:25:35 UTC 2017 - pgajdos@suse.com
 
 - updated to 0.18.4:
- * Fix for possible heap overrun in Canon makernotes parser
+ * Fix for possible heap overrun in Canon makernotes parser 
+   (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
-- add libraw-CVE-2017-14348.patch [bsc#1058467]
+- add libraw-out-of-bounds-kodak.patch, upstream bug #101
 - remove libraw-CVE-2017-6887,6886.patch and
          libraw-CVE-2017-6890,6899.patch:
   no need to patch dcraw.c, it is not used