Merge ~aburrage/ubuntu-cve-tracker:ignored-status-update into ubuntu-cve-tracker:master

[Alex Burrage]

Change to the policy for recording ignored status in user consumable form

[Alex Murray (alexmurray)]

LGTM!

review: Approve

diff --git a/README b/README
index f592f15..6e00f3a 100644
--- a/README
+++ b/README
@@ -319,11 +319,18 @@ For a given CVE, the package and release with status is encoded as:
 		field.	(Notes are valid.)
 
   ignored	This package (for the given release), while related to the
-		CVE in some way, is being ignored for some reason.  The
-		"notes" should detail why.  This is generally used when
-		a given CVE's priority is "negligible", and a firm
-		determination has been made to not fix a given release.
-
+		CVE in some way, is being ignored for some reason. This could
+		be because the package is no longer supported, or the CVE
+		has been withdrawn, or because fixing the issue would break
+		other functionality.
+		The reason for decision should be recorded in brackets, e.g.:
+		ignored (out of standard support)
+		ignored (fix would unavoidably negatively impact other 
+			packages)
+		ignored (vulnerabilty has been disputed by upstream 
+			maintainers)
+		The "notes" section may give more detail and external links.
+		
   pending	This package (for the given release) is vulnerable, and
 		an update is pending, usually waiting for upload or
 		publication.  The "version" should be the version containing