diff --git a/NEWS b/NEWS
index c233994..ef34982 100644
--- a/NEWS
+++ b/NEWS
@@ -389,6 +389,8 @@ Name: GlobalSign
 Alias Name: globalsigne46
 Distinguished Name: CN=GlobalSign Root E46, O=GlobalSign nv-sa, C=BE
 
+security-libs/javax.security:
+
 JDK-8328638: Fallback Option For POST-only OCSP Requests
 ========================================================
 JDK-8179503, introduced in OpenJDK 17, added support for using the
@@ -428,6 +430,8 @@ runtime search path to use down to the default of the linker. With
 this release, the option `--disable-new-dtags` is explicitly passed to
 the linker to avoid setting DT_RUNPATH.
 
+tools/jpackage:
+
 JDK-8295111: dpkg appears to have problems resolving symbolically linked native libraries
 =========================================================================================
 The jpackage tool uses `dpkg -S` to lookup which package provides a
diff --git a/java-21-openjdk.spec b/java-21-openjdk.spec
index 517c7a8..152f0fc 100644
--- a/java-21-openjdk.spec
+++ b/java-21-openjdk.spec
@@ -2532,6 +2532,7 @@ cjc.mainProgram(args)
 - Update release notes to 21.0.4+7
 - Switch to GA mode.
 - Sync the copy of the portable specfile with the latest update
+- Add missing section headers in NEWS
 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
 - Resolves: RHEL-47024