Rob Weir wrote on Fri, Jul 29, 2011 at 16:55:06 -0400: > For example, I'm not seeing at any stage where we would bring > a summary of a reported vulnerability to the PPMC, even on the private > list.
The PPMC could, for example, be on the pre-notification list once the fix is done.
