diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index 13c4852..aa30eda 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -2,7 +2,9 @@
 Thu Jun 30 09:18:14 UTC 2016 - wr@rosenauer.org
 
 - update to Thunderbird 45.2 (boo#983549)
-  - drop mozilla-flexible-array-member-in-union.patch, upstream
+  Security fixes:
+  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
+- drop mozilla-flexible-array-member-in-union.patch, upstream
 
 -------------------------------------------------------------------
 Fri Jun 24 14:10:58 UTC 2016 - wr@rosenauer.org