Add cross-references to applicable security advisories. Also
be more consistent about the format of the names we give for advisories.

Approved by: nectar