--- a/mozilla-xulrunner192/mozilla-xulrunner192.changes	Thu Mar 25 20:06:23 2010 +0100
+++ b/mozilla-xulrunner192/mozilla-xulrunner192.changes	Thu Mar 25 20:10:44 2010 +0100
@@ -3,6 +3,8 @@
 
 - security update to 1.9.2.2 (bnc#586567)
   * requires NSS 3.12.6
+  * MFSA 2010-08/CVE-2010-1028 (bmo#552216)
+    WOFF heap corruption due to integer overflow
 - general.useragent.locale in profile overrides 
   intl.locale.matchOS (bmo#542999)
 - split mozilla-js192 package which contains libmozjs only