diff --git a/python313.changes b/python313.changes
index 0c80e96..fca3fda 100644
--- a/python313.changes
+++ b/python313.changes
@@ -1524,8 +1524,9 @@ Thu May  9 08:18:00 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
         ipaddress.IPv4Address.is_global
         ipaddress.IPv6Address.is_private
         ipaddress.IPv6Address.is_global
-    - Also in the corresponding ipaddress.IPv4Network and
-      ipaddress.IPv6Network attributes.
+        - Also in the corresponding ipaddress.IPv4Network and
+          ipaddress.IPv6Network attributes.
+        - Fixes bsc#1226448 (CVE-2024-4032).
     - gh-63283: In encodings.idna, any capitalization of the the ACE
       prefix (xn--) is now acceptable. Patch by Pepijn de Vos and
       Zackery Spytz.
@@ -2813,7 +2814,7 @@ Thu Feb  8 08:10:09 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
       behavior, accept malformed inputs. getattr(email.utils,
       'supports_strict_parsing', False) can be use to check if the
       strict paramater is available. Patch by Thomas Dwyer and Victor
-      Stinner to improve the CVE-2023-27043 fix.
+      Stinner to improve the CVE-2023-27043 fix (bsc#1210638).
     - gh-52161: cmd.Cmd.do_help() now cleans docstrings with
       inspect.cleandoc() before writing them. Patch by Filip
       Łapkiewicz.