Tracking security bugs

[Paul Eggert]

Florian Weimer wrote:
> I would like to create a Wiki page that suggests that potentially
> critical bugs are reported to downstream security teams.

I like this idea.  It'd be helpful for that page to give an example of a 
such a bug and how it was reported, so that potential contributors will 
better understand the process they're getting into.  I also suggest 
cross-referencing from:

https://sourceware.org/glibc/wiki/Development_Todo/Master#Security

to the new page.