Merge branch 'ab/man-sec-list'

Doc update.

* ab/man-sec-list:
git manpage: note git-security@googlegroups.com

diff --combined Documentation/git.txt
index 8163b5796b192ee5f5c0cb13fc85bdeff8202e64,4881688b3985df6ab71d94d0df8df060c2e18dcc..4767860e72f46d4e4df883f2fdbb4a46eb8e8eda
--- 1/Documentation/git.txt
--- 2/Documentation/git.txt
+++ b/Documentation/git.txt
@@@ -646,16 -646,6 +646,16 @@@ of clones and fetches
        variable.
        See `GIT_TRACE` for available trace output options.
  
 +`GIT_TRACE_CURL_NO_DATA`::
 +      When a curl trace is enabled (see `GIT_TRACE_CURL` above), do not dump
 +      data (that is, only dump info lines and headers).
 +
 +`GIT_REDACT_COOKIES`::
 +      This can be set to a comma-separated list of strings. When a curl trace
 +      is enabled (see `GIT_TRACE_CURL` above), whenever a "Cookies:" header
 +      sent by the client is dumped, values of cookies whose key is in that
 +      list (case-sensitive) are redacted.
 +
  `GIT_LITERAL_PATHSPECS`::
        Setting this variable to `1` will cause Git to treat all
        pathspecs literally, rather than as glob patterns. For example,
@@@ -849,6 -839,9 +849,9 @@@ Report bugs to the Git mailing list <gi
  development and maintenance is primarily done.  You do not have to be
  subscribed to the list to send a message there.
  
+ Issues which are security relevant should be disclosed privately to
+ the Git Security mailing list <git-security@googlegroups.com>.
+ 
  SEE ALSO
  --------
  linkgit:gittutorial[7], linkgit:gittutorial-2[7],