lisp/ChangeLog (2014-05-08): Add CVE numbers for recent issue