After having a bookmark for SitePoint.com for about 3 years now, I am featured in an interview on the site. They are a little more commercial centric, and that's an area of marketing that many OS CMS's seem to miss.
There is way too much back biting in the OS CMS world, when the real target of opportunity is the commercial CMS's. I do have a friendly relationship with Dries of Drupal and Mark of Tiki, but beyond that, there isn't much of an sense of community within the OS CMS market. Perhaps I am the unfriendly one;) My critics would call me worse, I suppose.
Xaraya .9.0.6 was our first security related release. I had never figured we would have made it this far without something reported that would make us back up and scratch our heads about the archetecture, but alas we did. This one wasn't so bad, and actually was fixed with six lines of code, but it warrented release. Not a bad response either; less than 20 hours with a fix and a new package straight from the BK tree, instead of from a branch.