diff --git a/obs-service-source_validator.changes b/obs-service-source_validator.changes
index c58b80f..87932b9 100644
--- a/obs-service-source_validator.changes
+++ b/obs-service-source_validator.changes
@@ -3,7 +3,7 @@ Thu Aug 10 07:44:02 UTC 2017 - mstrigl@suse.com
 
 - Update to version 0.6+git20170809.6818366:
   * Ignore not referenced appimage.yml file
-  * Don't use rpmbuild to extract sources, patches etc. from a spec
+  * Don't use rpmbuild to extract sources, patches etc. from a spec (bnc#938556 CVE-2017-9274)
 
 -------------------------------------------------------------------
 Wed Jul 19 09:08:06 UTC 2017 - tchvatal@suse.com