Make note of the fact that we fixed some CVEs

Just a doc change. If anyone thinks they deserve separate items let me know. /cc @dstufft