Full post to OSS security.
Also add CVE to changelog.
Merge branch 'master' into full-post-to-oss-security

Conflicts:
	doc/release/security.md
Merge branch 'full-post-to-oss-security' of /home/git/repositories/gitlab/gitlabhq