According to Napoleon, never ascribe to malice, that which can be explained by incompetence.
How do you know, it's malice and not incompetence? Some of the comments imply malice.
Of course, incomptence is not that reassuring either, but for example Al Viro's comit seems to
be two months older than the DoS bug report so I don't see how could he knowingly omit the
security information from the bug report...