update release notes with CVE information
1 file changed