On May 29, 2013, at 03:53 PM, R. David Murray wrote:
By making it a release blocker in the tracker. (Once it is public...I would imagine release managers have to be on the security mailing list...though I don't know that for a fact.)
Yes, all release managers for active branches are on the security mailing list. (Well, Larry wasn't but is now :).