That's a good point, Julian. I think it is important to let people know that they *have* been vulnerable to something, in case they need to take the opportunity to double-check whether they *were* actually exploited, or in case it lets them know that they need to upgrade or take defensive action on other installations, or advise someone else to do so.
I guess a possible compromise would be to remove known_issues.rst from the distribution. I just checked and the only mentions of it in the other docs point to the current version of it on the web: http://tahoe-lafs.org/trac/tahoe- lafs/browser/trunk/docs/known_issues.rst Here are all the hits for "grep -r known_issues ." in my 1.8.3 sandbox: docs/how_to_make_a_tahoe-lafs_release.rst:[✓] 1 update doc files: `<../relnotes.txt>`_, `<../CREDITS>`_, `<known_issues.rst>`_, `<../NEWS>`_. Add release name and date to top-most item in NEWS. docs/known_issues.rst:`<http://tahoe-lafs.org/source/tahoe-lafs/trunk/docs/known_issues.rst>`_. docs/known_issues.rst:<historical/historical_known_issues.txt>`_. docs/historical/historical_known_issues.txt:http://tahoe-lafs.org/source/tahoe/trunk/docs/historical/historical_known_issues.txt docs/historical/historical_known_issues.txt:http://tahoe-lafs.org/source/tahoe/trunk/docs/known_issues.rst relnotes.txt:[2] and known_issues.rst [3] file for details. relnotes.txt:please see the known_issues.rst file [3].) relnotes.txt:[3] http://tahoe-lafs.org/trac/tahoe/browser/docs/known_issues.rst So I guess you could remove docs/known_issues.rst and docs /how_to_make_a_tahoe-lafs_release.rst. The latter one is clearly not needed by users and which isn't mentioned by any other document in the source tree. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/848476 Title: security flaw in Tahoe-LAFS could lead to unauthorized deletion of files To manage notifications about this bug go to: https://bugs.launchpad.net/tahoe-lafs/+bug/848476/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs