Yes, this bug should be marked public-security rather than private-security, since the vulnerability was already explicitly mentioned publicly in bug 1343604.
Yes, this bug should be marked public-security rather than private-security, since the vulnerability was already explicitly mentioned publicly in bug 1343604.