If this really is only impacting master (not yet released kilo) as a vulnerability, we should switch the bug to public immediately if it can be safely fixed before release.
If this really is only impacting master (not yet released kilo) as a vulnerability, we should switch the bug to public immediately if it can be safely fixed before release.