As there were no further objections after a lengthy review period under embargo, I'm switching this bug to Public Security.
It's still unclear to me on the backport suitability of the proposed fix for stable branches, so I've set the security advisory status back to incomplete while that's confirmed.
As there were no further objections after a lengthy review period under embargo, I'm switching this bug to Public Security.
It's still unclear to me on the backport suitability of the proposed fix for stable branches, so I've set the security advisory status back to incomplete while that's confirmed.