diff --git a/MozillaFirefox.changes b/MozillaFirefox.changes
index 45f3b18..0f1d6a1 100644
--- a/MozillaFirefox.changes
+++ b/MozillaFirefox.changes
@@ -14,6 +14,10 @@ Thu Dec  7 11:12:31 UTC 2017 - dimstar@opensuse.org
 Wed Nov 29 23:45:03 UTC 2017 - wr@rosenauer.org
 
 - update to Firefox 57.0.1
+  * CVE-2017-7843: Web worker in Private Browsing mode can write
+    IndexedDB data (bsc#1072034, bmo#1410106)
+  * CVE-2017-7844: Visited history information leak through SVG
+    image (bsc#1072036, bmo#1420001)
   * Fix a video color distortion issue on YouTube and other video
     sites with some AMD devices (bmo#1417442)
   * Fix an issue with prefs.js when the profile path has non-ascii