diff --git a/libtpms.changes b/libtpms.changes
index c1071dc..47df423 100644
--- a/libtpms.changes
+++ b/libtpms.changes
@@ -2,7 +2,8 @@
 Mon Mar  6 16:32:02 UTC 2023 - Alberto Planas Dominguez <aplanas@suse.com>
 
 - Update to 0.9.6:
-  * tpm2: Check size of buffer before accessing it (CVE-2023-1017 & CVE-2023-1018)
+  * CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023)
+  * CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022)
 
 -------------------------------------------------------------------
 Sat Dec  3 09:56:13 UTC 2022 - Dirk Müller <dmueller@suse.com>