Link "report bug" link in Gerrit to Bugzilla

The default links to the upstream tracker, but not all bugs with
our install belong there.

Change-Id: I012314c571978cd727e81b1b5c38dc3c8abe57d7
Re-introduce CVE links

We tried this before, but didn't have the escaping right. I've
tested this thoroughly, and this escapes all characters properly.

Change-Id: Iccc647c8ae07b6c3e081d24ec03c30f22886ada1
Merge "Re-introduce CVE links" into production
Merge "Link "report bug" link in Gerrit to Bugzilla" into production