Comment 15 for bug 918608

If they are coordinating a release, better keep that one below the radar until that's done. I also agree that we should not issue an OpenStack advisory on this... but that doesn't prevent us from sending an information e-mail.