diff --git a/openssh.changes b/openssh.changes
index d763c5a..2f4e28b 100644
--- a/openssh.changes
+++ b/openssh.changes
@@ -50,7 +50,8 @@ Sun Feb 25 18:26:23 UTC 2024 - Hans Petter Jansson <hpj@suse.com>
     protocol by sending extra messages prior to the commencement of
     encryption, and deleting an equal number of consecutive messages
     immediately after encryption starts. A peer SSH client/server
-    would not be able to detect that messages were deleted.
+    would not be able to detect that messages were deleted
+    (bsc#1217950, CVE-2023-48795).
   * ssh-agent(1): when adding PKCS#11-hosted private keys while
     specifying destination constraints, if the PKCS#11 token returned
     multiple keys then only the first key had the constraints applied.