diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index 22e7eba..f9161d2 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -9,7 +9,12 @@ Sat May 29 08:14:38 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
   * Contacts moved between CardDAV address books were not synced to
     the new server
   * CardDAV compatibility fixes for Google Contacts
-  MFSA 2021-
+  MFSA 2021-26 (bsc#1186696)
+  * CVE-2021-29964 (bmo#1706501)
+    Out of bounds-read when parsing a `WM_COPYDATA` message
+  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
+    bmo#1704722, bmo#1706041)
+    Memory safety bugs fixed in Thunderbird 78.11
 - renewed expired mozilla.keyring
 
 -------------------------------------------------------------------