Re: private bug reports

Hi, I was recently answering a question about null byte injection into PCRE and the OP claimed that a pattern such as "~.+~e\x00u" would be accepted; they were using 5.3. The commit that fixed it was this: https://github.com/php/php-src/commit/8b3c1a380a182655113b94b0b96551e98d05a8d3 The corresponding (private) bug is: https://bugs.php.net/bug.php?id=55856 My question is whether there's a defined "time out period" after which those kind of sensitive bug reports are opened to the public; is it done once we hit EOL for that branch? -- -- Tjerk