[tz] [PROPOSED 2/2] * CONTRIBUTING, NEWS: Mention SECURITY.

[Paul Eggert]

---
 CONTRIBUTING | 3 +++
 NEWS         | 4 ++++
 2 files changed, 7 insertions(+)

diff --git a/CONTRIBUTING b/CONTRIBUTING
index 8488a58..5373354 100644
--- a/CONTRIBUTING
+++ b/CONTRIBUTING
@@ -26,6 +26,9 @@ to work well.  Additions to data should contain commentary citing
 reliable sources as justification.  Citations should use https: URLs
 if available.
 
+For changes that fix sensitive security-related bugs, please see the
+file SECURITY.
+
 Please submit changes against either the latest release in
 <https://www.iana.org/time-zones> or the main branch of the development
 repository.  The latter is preferred.  If you use Git the following
diff --git a/NEWS b/NEWS
index de7d08c..7314421 100644
--- a/NEWS
+++ b/NEWS
@@ -26,6 +26,10 @@ Unreleased, experimental changes
     (Thanks to P Chan, Michael Deckers, Alexander Krivenyshev and
     Alois Treindl.)
 
+  Changes to maintenance procedure
+
+    The new file SECURITY covers how to report security-related bugs.
+
   Changes to code
 
     zic now creates each output file or link atomically,
-- 
2.27.0