Add CVE related information into the release changelog