docs: Add security contact information.

docs/guestfs-security.pod

@@ -7,6 +7,18 @@ guestfs-security - security of libguestfs
 This manual page discusses security implications of using libguestfs,
 particularly with untrusted or malicious guests or disk images.
 
+=head2 REPORTING SECURITY PROBLEMS
+
+If you wish to privately report a security issue, please follow the
+Red Hat security procedure at
+L<https://access.redhat.com/security/team/contact>
+
+If the security problem is not so serious, you can simply file a bug
+(see L</BUGS> below), or send an email to our mailing list
+(L<https://www.redhat.com/mailman/listinfo/libguestfs>).  You do not
+need to subscribe to the mailing list to send email, but there will be
+a delay while the message is moderated.
+
 =head2 SECURITY OF MOUNTING FILESYSTEMS
 
 You should never mount an untrusted guest filesystem directly on your