ChangeLog/1.4: CVE was finally assigned.