Comment 3 for bug 1002439

Ooh, some progress all of a sudden:

* Secunia replied, and said they will only assist in vulnerability investigation once it has been publicly disclosed , so they've dropped out of the process. Maybe they should be pinged once the vuln is public?
* I'd reported this to Ubuntu by email (ahem, on 1 May 2012) and today they replied to say they will look at this ticket.