diff --git a/MozillaThunderbird.changes b/MozillaThunderbird.changes
index d5c775d..dea88b3 100644
--- a/MozillaThunderbird.changes
+++ b/MozillaThunderbird.changes
@@ -2,6 +2,12 @@
 Sat Jan 10 18:33:52 UTC 2015 - wr@rosenauer.org
 
 - update to Thunderbird 31.4.0 (bnc#910669)
+  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
+    Miscellaneous memory safety hazards
+  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
+    sendBeacon requests lack an Origin header
+  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
+    Cookie injection through Proxy Authenticate responses
 - added mozilla-icu-strncat.patch to fix post build checks
 
 -------------------------------------------------------------------