The RHEL Development Guide has several sections on CVE, but many are conflicting, and most are out of date. Create one section based on the recent email from Perry Meyers/Jeremy West, and replace the other sections with a link.