Comment # 1 on bug 1208095 from John Paul Adrian Glaubitz

nova was already fixed in Tumbleweed, but the changelog was missing the
Bugzilla and CVE references.

Added these now:

> https://build.opensuse.org/request/show/1064232