doc: release notes: Update v2.2 for security

Add additional CVEs addressed in this release.

Signed-off-by: David Brown <david.brown@linaro.org>
1 file changed