diff --git a/openexr.spec b/openexr.spec
index e66a2e7..8b64916 100644
--- a/openexr.spec
+++ b/openexr.spec
@@ -35,7 +35,9 @@ Source0:        https://github.com/openexr/openexr/releases/download/v%{version}
 Source1:        https://github.com/openexr/openexr/releases/download/v%{version}/openexr-%{version}.tar.gz.sig
 Source2:        baselibs.conf
 Source3:        openexr.keyring
+# https://github.com/openexr/openexr/pull/401
 Patch0:         openexr-CVE-2018-18444.patch
+# https://github.com/openexr/openexr/pull/401
 # CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
 Patch1:         openexr-CVE-2017-9111,9113,9115.patch
 BuildRequires:  automake