diff --git a/mozilla-nss.changes b/mozilla-nss.changes
index 0c2d960..0d61b04 100644
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@@ -32,6 +32,8 @@ Sat Feb  2 16:05:20 UTC 2013 - wr@rosenauer.org
 - update to 3.14.2
   * required for Firefox >= 20
   * removed obsolete nssckbi update patch
+  * MFSA 2013-40/CVE-2013-0791 (bmo#629816)
+    Out-of-bounds array read in CERT_DecodeCertPackage
 - disable system sqlite usage since we depend on 3.7.15 which is
   not provided in any openSUSE distribution
   * add nss-sqlitename.patch to avoid any name clash