Add links to CVE-2014-1939 commits and update NOTE language