[Secure-testing-team] Tracking based on binary package names

[Florian Weimer]

Do we need this functionality?

I'm working on some tracker improvements, and the (limited) ability to
track CVEs based on binary packages makes progress rather difficult.