RFR: Fixed bugs in bug filing instructions

[Alan Bateman]

On Mon, 3 May 2021 12:57:07 GMT, Jesper Wilhelmsson <jwilhelm at openjdk.org> wrote:

> Changed to the correct address for filing vulnerabilities and added some clarifications.

src/index.md line 325:

> 323: * Before filing a bug, verify that there isn't already a bug filed for this issue.
> 324:   * Search [JBS](https://bugs.openjdk.java.net/) for things like the name of the failing test, assert messages, the name of the source code file where a crash occurred etc.
> 325: * If you suspect that the bug is a vulnerability, don't file a JBS issue. Instead send your bug report to [vuln-report at openjdk.java.net](mailto:vuln-report at openjdk.java.net). See [OpenJDK Vulnerabilities](https://openjdk.java.net/groups/vulnerability/report) for more information.

This looks fine but maybe add a note to say that the issue shouldn't be sent to any of the other OpenJDK mailing lists.

-------------

PR: https://git.openjdk.java.net/guide/pull/57