diff --git a/phpMyAdmin.changes b/phpMyAdmin.changes
index dc79b8c..85e8038 100644
--- a/phpMyAdmin.changes
+++ b/phpMyAdmin.changes
@@ -23,11 +23,11 @@ Sat May 28 07:33:29 UTC 2016 - ecsos@opensuse.org
 - remove PmaAbsoluteUri from phpMyAdmin-config.patch because since
   version 4.6.0 it is remove
 - Security fixes:
-  * PMASA-2016-14 (CVE-2016-5097, CWE-661)
+  * PMASA-2016-14 (CVE-2016-5097, CWE-661, boo#982126)
     https://www.phpmyadmin.net/security/PMASA-2016-14/
     - User SQL queries can be revealed through URL GET parameters,
       see PMASA-2016-14
-  * PMASA-2016-16 (CVE-2016-5099, CWE-661)
+  * PMASA-2016-16 (CVE-2016-5099, CWE-661, boo#982128)
     https://www.phpmyadmin.net/security/PMASA-2016-16/
     - Self XSS vulneratbility, see PMASA-2016-16