diff --git a/rpm.changes b/rpm.changes
index ee09fa1..6605f3d 100644
--- a/rpm.changes
+++ b/rpm.changes
@@ -9,7 +9,8 @@ Fri Dec  2 15:01:05 CET 2022 - mls@suse.de
   * add --shell option for interactive macro shell to rpmspec
   * add --justdb counterpart --nodb option and matching API flag
   * fix intermediate symlinks not verified (CVE-2021-35939)
-  * fix unowned directories created unsafely
+  * fix unowned directories created unsafely (bsc#1157880)
+    (CVE-2021-35938)
   * fix %posttrans argument on upgrade
   * fix package build tree not getting removed on successful build
   * add new %conf spec section for build configuration