>> Rule 8: For changes submitted for inclusion into a public JDK 7 Update forest, the corresponding bug tracker entry SHOULD be publicly visible. >> > > +1, but what about security issues? they should be handled today on a need-to-know basis until the GA of the CPU, with you/redhat being one of the parties who need-to-know. Roger