Add note for CVE-2017-15365 and older mariadb versions

The issue is possibly only introduced in the MariaDB 10.1 series when
merging Galera changes back. If this is true, then mariadb-10.0 will
not-affected, and so as well the Oracle MySQL products.

State: Unconfirmed.