Some textual changes to ChangeLog, add "Security:" to each security fix and
add CVE-id's where appropriate.