Add an entry to the CHANGES for the d2i_X509_PUBKEY fix

The commit 5dc40a83

 forgot
to add a short description to the CHANGES file.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/8144)