Add release note for the 2.8.7 security release