Update CHANGES security issues