Add a changes file for bug 5066.

(It appeared in 0.2.3.11-alpha, but never in a released 0.2.2 afaict)

changes/bug5066

@@ -0,0 +1,4 @@
+  o Minor bugfixes:
+    - Use the correct CVE number for CVE-2011-4576 in our comments and
+      log messages. Found by "fermenthor". Resolves bug 5066; fix on
+      0.2.3.11-alpha.