While true, security reports should be treated as confidential until a patch is widely available.