doc: releases: 3.0: Update security notes

A CVE just left the embargo period before the release.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
1 file changed