diff --git a/xen.spec b/xen.spec
index 3f8d65c..cee6a7f 100644
--- a/xen.spec
+++ b/xen.spec
@@ -846,10 +846,10 @@ rm -rf %{buildroot}
 * Thu Sep 08 2016 Michael Young <m.a.young@durham.ac.uk> - 4.7.0-4
 - fix build problem with glibc 2.24
 - x86: Disallow L3 recursive pagetable for 32-bit PV guests [XSA-185,
-	CVE-2016-7092]
+	CVE-2016-7092] (#1374470)
 - x86: Mishandling of instruction pointer truncation during emulation
-	[XSA-186, CVE-2016-7093]
-- x86 HVM: Overflow of sh_ctxt->seg_reg[] [XSA-187, CVE-2016-7094]
+	[XSA-186, CVE-2016-7093] (#1374471)
+- x86 HVM: Overflow of sh_ctxt->seg_reg[] [XSA-187, CVE-2016-7094] (#1374473)
 
 * Wed Aug 10 2016 Michael Young <m.a.young@durham.ac.uk> - 4.7.0-3
 - replace xendriverdomain sysvinit script with a systemd file (#1361324)