Include CVE numbers in changelog as best practice

[Damián Viano <debian@xxxxxxxxxxxxxx>]

Today I searched about including CVE numbers[1] in old entries on the
changelog in the dev-ref and didn't found it, so after asking in #d-d,
here is a patch. Feel free to rephrase since I'm not native english
speaker.

        Hope to help,

-- 
Damián Viano(Des)              ¯ ¯ - _           _ - ¯ ¯
GPG: 0x6EB95A6F                 Debian ¯-_GNU_-¯ Linux
Web: http://damianv.com.ar/               ¯-¯

developers-reference.sgml.cve_numbers.patch
Description: Add entry to Best practices for debian/changelog about security fixes