Wouldn't package maintainers get the CVE bug notification from Bugzilla about FF that I pointed to? Given that, the assumption that maintainers are away seems reasonable. Ergo, I sent an e-mail to the list. PS. I also checked FF package git repo, which had no recent commits. -- Bojan _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx