Changes to the security vulnerability reflecting policy changes approved by the board. Signed-off-by: David Brown <david.brown@linaro.org>