diff --git a/xen.spec b/xen.spec
index 15c2a98..360471b 100644
--- a/xen.spec
+++ b/xen.spec
@@ -949,16 +949,17 @@ fi
 - race when migrating timers between x86 HVM vCPU-s [XSA-336,
 	CVE-2020-25604]
 - PCI passthrough code reading back hardware registers [XSA-337,
-	CVE-2020-25595]
+	CVE-2020-25595] (#1881587)
 - once valid event channels may not turn invalid [XSA-338, CVE-2020-25597]
+	(#1881588)
 - x86 pv guest kernel DoS via SYSENTER [XSA-339, CVE-2020-25596]
 - Missing memory barriers when accessing/allocating an event channel [XSA-340,
-	CVE-2020-25603]
+	CVE-2020-25603] (#1881583)
 - out of bounds event channels available to 32-bit x86 domains [XSA-342,
-	CVE-2020-25600]
-- races with evtchn_reset() [XSA-343, CVE-2020-25599]
+	CVE-2020-25600] (#1881582)
+- races with evtchn_reset() [XSA-343, CVE-2020-25599] (#1881581)
 - lack of preemption in evtchn_reset() / evtchn_destroy() [XSA-344,
-	CVE-2020-25601]
+	CVE-2020-25601] (#1881586)
 
 * Thu Sep 03 2020 Michael Young <m.a.young@durham.ac.uk> - 4.14.0-4
 - rebuild for OCaml 4.11.1