diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index 14c77a3..9c34936 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -16,10 +16,10 @@ Fri May 14 08:58:19 UTC 2021 - Wolfgang Rosenauer <wr@rosenauer.org>
   * Mail toolbar buttons were too big when displaying both icons
     and text
   MFSA 2021-22
-  * CVE-2021-29956 (bmo#1710290)
+  * CVE-2021-29956 (boo#1186199, bmo#1710290)
     Thunderbird stored OpenPGP secret keys without master password
     protection
-  * CVE-2021-29957 (bmo#1673241)
+  * CVE-2021-29957 (boo#1186198, bmo#1673241)
     Partial protection of inline OpenPGP message not indicated
 - do not rely on nodejs10 explicitely