Comment 6 for bug 411733

I don't like the fact that remote code execution vulnerability is open for days even though there is a fixed version avaiable which only needs to be packaged :(

And it prevents me from development because I work on a XML-based peer-to-peer application :( Can someone fix this?