"denial of service (INSIST assertion failure and daemon exit) via a crafted DNS
query to an authoritative nameserver that uses the NSEC3 signing feature" isn't
relevant for us.

Move some to the security advisory, drop the others. The details are in the
Changelog, and in the list of installed packages.

Our repo is not *the* Tor browser one.