[Devel] Security Patches

Greetings, Is there a guide on how to publish security patches for packages? Or example of working code I can learn from is also useful. I have rpm repo using createrepo, and tried updating the security info with modifyrepo and updateinfo.xml but dnf --refresh update --security never picks it up. Thanks, Dervish