Update CVE URLs in patch release draft blog post

What does this MR do and why?

This MR changes CVE link URLs from using legacy cve.mitre.org/cgi-bin/cvename.cgi?name= to using the new https://www.cve.org/CVERecord?id= URLs.

The old cve.mitre.org/cgi-bin/cvename.cgi?name= URLs have a banner which states

• Old: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3279 ☹️
• New: https://www.cve.org/CVERecord?id=CVE-2025-3279 😃

Content

• Update CVE URLs

Migrate from legacy using cve.mitre.org/cgi-bin/cvename.cgi?name= to using new https://www.cve.org/CVERecord?id= URLs for CVE links

Author Check-list

• Has documentation been updated?