Not sure why people flagged you for this. It's very common for open source projects to make the details of security-related bugs private. One example is Firefox

Not sure why people flagged you for this. It's very common for open source projects to make the details of security-related bugs private. One example is Firefox, nearly every security update references one or more bug tickets that the public doesn't have permission to view. I wonder if Apple listed the wrong webkit bug number, it almost looks like it.