diff --git a/python-asteval.changes b/python-asteval.changes
index 3655fd1..a8dc4e3 100644
--- a/python-asteval.changes
+++ b/python-asteval.changes
@@ -5,7 +5,8 @@ Mon Jan 27 12:42:41 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.c
   * drop testing and support for Python3.8, add Python 3.13,
     change document to reflect this.
   * implement safe_getattr and safe_format functions; fix bugs
-    in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
+    in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage (bsc#1236405,
+    CVE-2025-24359)
   * make all procedure attributes private to curb access to AST
     nodes, which can be exploited
   * improvements to error messages, including use ast functions