Add CVE-id to ChangeLog and ReleaseNotes, some ChangeLog formatting,
AUTHORS are sorted by first name so move Jimmy up.