Update devel changelog with security vuln.