Fill in real CVE identifiers assigned to us by our contact at Red Hat.
release-2.x.y
2014-01-15, Mark Doliner