How do I flag an RPM as a bug or security fix?

view story

http://forums.fedoraforum.org – I've noticed the PackageKit application in gnome2 (RHEL6) that sometimes packages can be marked as a bugfix or security update. I have not found anything special in the SRPMs or specfiles of these applications, nor could I find any info on the packagekit website, besides this: http://www.packagekit.org/pk-faq.html#tray-icons. I am guessing that metadata is somehow added to the Yum repo? Can anyone direct me to documentation for this feature? Or if it is a RPM, Yum, or PackageKit feature. Thanks (HowTos)