Security related bug fix...

[Dawit Alemayehu]

Hello all,

I have been away for a while and completely forgot if there ever was a 
different procedure for handling a security related bug fixes ? I was fixing 
a big when I discovered that this bug is indeed a security issue. Should I 
post the details here first or was there something else we followed first ?

The bug is related to the cookiejar and causes a cross-site cookie injection 
vulnerability.