Update NEWS and ChangeLog for CVE-2017-15671