5e56d86768
- point at the FDP article rather than GNU's send-pr documentation - warn the user that PRs are public information and will be published in mailing lists and on the web - suggest that the user contact security-officer@ directly if the report concerns sensitive security issues.