Add the real CVE number
release-2.x.y
2017-03-08, Gary Kramlich