diff --git a/proftpd.spec b/proftpd.spec
index 46e7440..c9ce3d1 100644
--- a/proftpd.spec
+++ b/proftpd.spec
@@ -259,11 +259,11 @@ cp -p %{SOURCE1} proftpd.conf
 %patch8
 
 # Fix handling of CRL lookups by properly using issuer for lookups, and
-# guarding against null pointers (CVE-2019-19269, CVE-2019-19272)
-# https://github.com/proftpd/proftpd/issues/858
-# https://github.com/proftpd/proftpd/issues/859
-# https://github.com/proftpd/proftpd/issues/860
-# https://github.com/proftpd/proftpd/issues/861
+# guarding against null pointers
+# https://github.com/proftpd/proftpd/issues/858 (CVE-2019-19272)
+# https://github.com/proftpd/proftpd/issues/859 (CVE-2019-19270)
+# https://github.com/proftpd/proftpd/issues/860 (CVE-2019-19271)
+# https://github.com/proftpd/proftpd/issues/861 (CVE-2019-19269)
 %patch9
 
 # Fix possible symlink race when applying UserOwner to newly created directory
@@ -547,7 +547,7 @@ fi
 * Fri Nov 29 2019 Paul Howarth <paul@city-fan.org> - 1.3.5e-8
 - Fix handling of CRL lookups by properly using issuer for lookups, and
   guarding against null pointers (GH#858, GH#859, GH#860, GH#861,
-  CVE-2019-19269, CVE-2019-19272)
+  CVE-2019-19269, CVE-2019-19270, CVE-2019-19271, CVE-2019-19272)
 
 * Wed Oct 23 2019 Paul Howarth <paul@city-fan.org> - 1.3.5e-7
 - Fix build compatibility with MySQL 8 (#1764401)