When filing bugs, please don't ask maintainers to refer to Secunia IDs. The entries in there are often poorly researched and not suitable as unique references among distributions. Rather point them to the CVE entry or - if not yet available - tell them that a CVE ID is going to be requested. Cheers, Moritz