diff --git a/openexr.changes b/openexr.changes
index 1bf20e9..13ec75c 100644
--- a/openexr.changes
+++ b/openexr.changes
@@ -1,11 +1,15 @@
 -------------------------------------------------------------------
 Mon Jan 15 05:19:19 UTC 2018 - avindra@opensuse.org
 
-- Update to 2.2.1 [bsc#1040109], [bsc#1040107], [bsc#1040112],
-    [bsc#1040113], [bsc#1040114], [bsc#1040115], [bsc#1040116]
+- Update to 2.2.1 
   * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
     CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
     CVE-2017-9115 and CVE-2017-9116
+- pgajdos@suse.com: but really seem to fix only:
+  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
+  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
+  the rest of issues see [bsc#1040109], [bsc#1040112], 
+  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]
 
 -------------------------------------------------------------------
 Wed Jul 12 09:22:22 UTC 2017 - tchvatal@suse.com