Comment 3 for bug 1639691

I agree this is not a security bug, and thus doesn't need to be embargoed because of that. However, I think Kota is wise for keeping this private for now. Although there has been some limited public discussion of this issue in IRC, this is the bug that is tracking the issue.

I'd prefer that this issue stay private until we have a better-defined (and implemented or in-progress) plan for users who may be affected by this. Kota's plan in the bug description is good. I'd add that we should consider providing a migration script for users to run if they are affected.