The file /usr/share/sendmail-cf/README refers people to the file sendmail/SECURITY, which unfortunately isn't included in any of the sendmail RPMs.
Fixed in 8.12.2-10 or newer. Thanks for this bug-report, Florian La Roche