diff --git a/xen.spec b/xen.spec
index 629f7b6..fb61d40 100644
--- a/xen.spec
+++ b/xen.spec
@@ -702,7 +702,7 @@ rm -rf %{buildroot}
 
 %changelog
 * Thu Sep 06 2012 Michael Young <m.a.young@durham.ac.uk> - 4.1.3-4
-- disable qemu monitor by default [XSA-19]
+- disable qemu monitor by default [XSA-19, CVE-2012-4411] (#855141)
 
 * Wed Sep 05 2012 Michael Young <m.a.young@durham.ac.uk> - 4.1.3-3
 - 5 security fixes