diff --git a/webkit2gtk3.changes b/webkit2gtk3.changes
index 88fb2a5..3394236 100644
--- a/webkit2gtk3.changes
+++ b/webkit2gtk3.changes
@@ -1,7 +1,7 @@
 -------------------------------------------------------------------
 Mon Mar 12 16:18:01 UTC 2018 - dimstar@opensuse.org
 
-- Update to version 2.20.0:
+- Update to version 2.20.0 (boo#1088182):
   + New API to retrieve and delete cookies with
     WebKitCookieManager.
   + New web process API to detect when form is submitted via
@@ -11,6 +11,12 @@ Mon Mar 12 16:18:01 UTC 2018 - dimstar@opensuse.org
   + Complex text rendering improvements and fixes.
   + Added a low power mode.
   + More complete and spec compliant WebDriver implementation.
+  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
+    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
+    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
+    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
+    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
+    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165.
 
 -------------------------------------------------------------------
 Tue Mar  6 21:49:48 UTC 2018 - mgorse@suse.com