Address review feedback; add notes about out-of-band with pointer to fixed CVE

Signed-off-by: Chris Wayne <cwayne18@gmail.com>

data/releases/eol.yaml

@@ -1,7 +1,9 @@
 branches:
   - release: "1.25"
-    finalPatchRelease: "1.25.15"
+    finalPatchRelease: "1.25.16"
     endOfLifeDate: 2023-10-28
+    note: >-
+      1.25.16 was released in November 2023 (after the EOL date) to fix [CVE-2023-5528](https://github.com/advisories/GHSA-hq6q-c2x6-hmch)
   - release: "1.24"
     finalPatchRelease: "1.24.17"
     endOfLifeDate: 2023-07-28

data/releases/schedule.yaml

@@ -14,6 +14,8 @@ schedules:
     - release: 1.28.4
       cherryPickDeadline: ""
       targetDate: 2023-11-14
+      note: >-
+        Out of band release to fix [CVE-2023-5528](https://github.com/advisories/GHSA-hq6q-c2x6-hmch)
     - release: 1.28.3
       cherryPickDeadline: 2023-10-13
       targetDate: 2023-10-18
@@ -39,6 +41,8 @@ schedules:
     - release: 1.27.8
       cherryPickDeadline: ""
       targetDate: 2023-11-14
+      note: >-
+        Out of band release to fix [CVE-2023-5528](https://github.com/advisories/GHSA-hq6q-c2x6-hmch)
     - release: 1.27.7
       cherryPickDeadline: 2023-10-13
       targetDate: 2023-10-18
@@ -77,6 +81,8 @@ schedules:
     - release: 1.26.11
       cherryPickDeadline: ""
       targetDate: 2023-11-14
+      note: >-
+        Out of band release to fix [CVE-2023-5528](https://github.com/advisories/GHSA-hq6q-c2x6-hmch)
     - release: 1.26.10
       cherryPickDeadline: 2023-10-13
       targetDate: 2023-10-18