On Tue, 7 Jul 2009 23:32:57 +0200, Francesco Poli wrote: > I think that *introducing* (that is to say, as a regression) a security > hole that allows a denial of service attack (crash) and/or a privilege > escalation attack *does* have serious consequences. priviledge escalations are considered release-critical, denial-of-services are not. mike