diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index 0095ba0..f024c0e 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -15,6 +15,9 @@ Wed Sep 25 11:46:51 UTC 2019 - Wolfgang Rosenauer <wr@rosenauer.org>
   * "Config Editor" button not removed if blocked by policy
   * Calendar: Free/busy information in attendees dialog not scrolled
     correctly. Note: Scroll arrows still not behaving correctly
+  MFSA 2019-32
+  * CVE-2019-11755 (bmo#1240290)
+    Spoofing a message author via a crafted S/MIME message
 - require nodejs8 instead of generic nodejs for better cross-distribution
   support
 - call desktop database update on install