general handling of security issues

[Florian Holeczek]

Hi all, especially Janne,

supposed one has found a really bad security bug, what to do? Mail it
on the dev-list? Enter it into JIRA?

Regards,
 Florian