Define a security process

[D4N]

Originally posted by @cryptomilk in #1018 (comment)

For fuzzing and also security related fixes it is important to have the process documented. You can use: https://www.libssh.org/development/security-process/

Write down which versions you support and communicate that. Example: https://wiki.samba.org/index.php/Samba_Release_Planning

This way you can always point people to your processes. The smaller the team the less versions you should have in maintenance mode.

I hope that helps.

[cryptomilk]

Also get CVEs through the Red Hat Security team, they also assist if something is considered a security issue or not.

[clanmills]

Done: #1122.