diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 7e7441bf4..2a7d95ca9 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -6,13 +6,13 @@ Curl and libcurl 7.52.1
  Public functions in libcurl:  61
  Contributors:                 1480
 
-This release includes the following changes:
-
- o
-
 This release includes the following bugfixes:
 
+ o CVE-2016-9594: unititialized random [1]
+ o lib557: fix checksrc warnings
  o lib: fix MSVC compiler warnings
+ o lib557.c: use a shorter MAXIMIZE representation [2]
+ o tests: run checksrc on debug builds
 
 This release includes the following known bugs:
 
@@ -21,10 +21,12 @@ This release includes the following known bugs:
 This release would not have looked like this without help, code, reports and
 advice from friends like these:
 
-  Marcel Raad
+  Daniel Stenberg, Kamil Dudka, Marcel Raad, Ray Satiro,
+  (4 contributors)
 
         Thanks! (and sorry if I forgot to mention someone)
 
 References to bug reports and discussions on issues:
 
- [1] = https://curl.haxx.se/bug/?i=
+ [1] = https://curl.haxx.se/docs/adv_20161223.html
+ [2] = https://curl.haxx.se/mail/lib-2016-12/0098.html