diff --git a/nextcloud.changes b/nextcloud.changes
index 282512c..900ba9e 100644
--- a/nextcloud.changes
+++ b/nextcloud.changes
@@ -6,6 +6,8 @@ Mon Jun 11 16:40:57 UTC 2018 - ecsos@opensuse.org
   - Make the token expiration also work for autocasting 0 
     (server#9803)
   - Enable caldav for webdav subtree public-calendars (server#9820)
+- This also fix security issues:
+  - (boo#1100343, CVE-2018-3762) and (boo#1100344, CVE-2018-3761)
 
 -------------------------------------------------------------------
 Thu Jun  7 22:12:29 UTC 2018 - ecsos@opensuse.org