Changelog, spell out the CVEs that where fixed.