[librsvg: 1/5] SECURITY.md: note on where to report security bugs

[Marge Bot <marge-bot src gnome org>]

commit a8bb0f7cf7b3f5055c1f8775c51495b11eabaa28
Author: Federico Mena Quintero <federico gnome org>
Date:   Fri Jun 10 14:49:32 2022 -0500

    SECURITY.md: note on where to report security bugs
    
    Part-of: <https://gitlab.gnome.org/GNOME/librsvg/-/merge_requests/706>

 SECURITY.md | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)
---
diff --git a/SECURITY.md b/SECURITY.md
index 6cb8cf199..f9ae87817 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,8 +1,15 @@
+# Reporting security bugs
+
+Please mail the maintainer at federico gnome org.  You can use the GPG
+public key from https://viruta.org/docs/fmq-gpg.asc to send encrypted
+mail.
+
 # Librsvg releases with security fixes
 
-Note that releases with an odd minor number (e.g. 2.47.x since
-47 is odd) are considered development releases and should not be used
-in production systems.
+Librsvg releases have a version number like major.minor.micro. Note
+that releases with an odd minor number (e.g. 2.47.x since 47 is odd)
+are considered development releases and should not be used in
+production systems.
 
 The following list is only for stable release streams, where the minor
 number is even (e.g. 2.50.x).