Is the patch to correct this behavior one which can be backported safely to prior releases/stable branches? If not, and the only mitigation is to adjust configuration, then this information is probably better suited as a security note than an advisory.
Is the patch to correct this behavior one which can be backported safely to prior releases/stable branches? If not, and the only mitigation is to adjust configuration, then this information is probably better suited as a security note than an advisory.