Ingo Schommer 62bd6ff334 DOCS Clarify security process, introduce CVE and CVSS
Moved the guts to "making a core release", since it's only really relevant to that audience.
There's more work to do around making security and non-security releases the same (less special handling),
but I think this is a good start.

[ci-skip]
2019-02-26 13:48:07 +13:00
..
2018-11-14 23:06:17 +13:00