We need to implement a more powerful issue history that takes into consideration access levels and renaming of values like version names, etc. However, for now you can use the patch below:

In core/bugnote_api.php, function bugnote_add():

Replace:

log new bug

history_log_event_special( $p_bug_id, BUGNOTE_ADDED, bugnote_format_id( $t_bugnote_id ) );

With:

if ( !$p_private ) {

log new bug

history_log_event_special( $p_bug_id, BUGNOTE_ADDED, bugnote_format_id( $t_bugnote_id ) );
}

With this patch the notes private doesn't log and show in history for the reporter users?

fixed in CVS
core/history_api.php -> 1.35