Update CHANGES, reference a CVE.
1 file changed