Update notes for submitted changes

* fix vulnerability in bspatch