Add the missing CVE number to the release notes.
Merge branch 'release-0.6.x'
Add the missing CVE number to the release notes.