Should this just be closed out until there is further input? It appears that until then, Thierry and John's position is that there are no changes to be made here to resolve a vulnerability. For what it's worth, I agree with their assessment, as well.
Should this just be closed out until there is further input? It appears that until then, Thierry and John's position is that there are no changes to be made here to resolve a vulnerability. For what it's worth, I agree with their assessment, as well.