Normally we just conduct all security discussions without hiding anything. If you see that it might lead to problems for open installations out there send a private message to me or Martin Nilsson. We can probably make sure that there at least is a new source build available 1h or so after a fix is checked in if we decide a date and time in advance.