diff --git a/xterm.changes b/xterm.changes
index 2c20bcb..22f17df 100644
--- a/xterm.changes
+++ b/xterm.changes
@@ -62,6 +62,7 @@ Thu May 18 13:17:27 UTC 2023 - Dirk Müller <dmueller@suse.com>
       combining character.
     + disallow  ReGIS  reporting  for character-set names containing
       characters other than alphanumerics or underscore.
+      (CVE-2023-40359 bsc#1214282)
     + implement  TrueType fallback font for double-sized characters,
       including  Unicode  fullwidth.  Also  add  limitFontHeight  to
       provide    for    configuring    the    distinction    between