Hi All,
Just so everybody knows, I emailed Security@DotNetNuke.com two days ago when Joe R. and I first discovered the issue.  We did not receive any follow up or additional information.  I'll be resending the information shortly, but Shaun/Bill/Team - this is a critical issue!  Ya'll all have my phonenumber, but I don't have yours (and if you don't have mine, it is 402-650-6072).  Just Call me!  Let's work together and get this thing taken care of.  

In regards to the blast email to our customers, in all circumstances, our customers are our first priority and we needed to notify them that we were making critical updates to their site so that they would not overwrite our patches with a development version of their website.

-Tony V.

Tony - From the people I'm speaking to today, and the response I'm seeing here on the forums, many people in the community are perceiving your email blast/news announcement as a fear-based marketing tactic.  Which brings me to another point.

On the "Testimonials" page of the PowerDNN site, you've prominently included a quote that reads "You guys, are great!  Without your support DNN sucks!"  (Yes, someone else's words, not yours right?)  So my question to you Tony - Do you agree with this statement, especially so much so that you have used it as a marketing tool (testimonial) on your site?

I think your answer, not to me, but to everyone in the community who participates with the DNN project - users, team members, consultants, designers, etc. - will have alot to say about your midset and the manner in which you handled the security issue.