Comment 2 for bug 1919357

Josephine: You should feel free to push your documentation patch in public to review.opendev.org as normal. Once the fix merges (and maybe gets backported to supported stable branches), we can entertain publication of a security note to help raise awareness for the benefit of anyone who may have followed the old instructions and not realized they were incomplete.