[Secure-testing-team] Updates for testing-security track page

[Florian Weimer]

* Djoume SALVETTI:

> Moritz, I've just noticed that you do not always add [sarge] for issues
> in mozilla-firefox that are also in firefox, is there any reason for
> that? Am I misunderstanding something?

In some cases, the issues are 1.5-only and they don't affect sarge.

> If you agree, I can add [sarge] for all mozilla-firefox and
> mozilla-thunderbird issues.

It's usually better to add "- mozilla-thunderbird <removed>"
annotations.  Otherwise, you might need to edit the CVE/list file for
the DSA.