Comment 2 for bug 1382562

I've added an incomplete security advisory task while the bug report is analyzed by Neutron reviewers to determine the level of risk posed. Since you pushed a patch correcting this defect to our public code review system and mentioned this bug number in the commit message, I have switched it from private security to public security (the cat is already out of the bag, as they say).