diff --git a/nghttp2.spec b/nghttp2.spec
index e37f1cb..577e893 100644
--- a/nghttp2.spec
+++ b/nghttp2.spec
@@ -102,7 +102,7 @@ make %{?_smp_mflags} check
 
 %changelog
 * Fri Dec 25 2015 Kamil Dudka <kdudka@redhat.com> 1.6.0-1
-- update to the latest upstream release
+- update to the latest upstream release (fixes CVE-2015-8659)
 
 * Thu Nov 26 2015 Kamil Dudka <kdudka@redhat.com> 1.5.0-1
 - update to the latest upstream release