Updated d/changelog to refer to Debian bug report # about CVEs