Add CVE link to 8.6.1 release notes

Author: adriankjohnson

articles/cyclecloud/release-notes/8-6-1.md

@@ -10,7 +10,7 @@ ms.author: adjohnso
 
 ## Resolved Issues:
 
-* Security issue allowed a potential user privilege escalation.
+* An elevation-of-privilege vulnerability existed for a user with access to CycleCloud [(CVE-2024-29993)](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29993).
 * The GPG key for the AlmaLinux 8 package repos in older images was revoked. CycleCloud will now update the gpg keys upon boot for AlmaLinux 8.
 * The Slurm Accounting record did not identify Spot VMs as "Spot" in the admin comment.
 * Settings whose values were secrets were shown in plain test in the Settings page.