I'm pretty curious about this as well... I submitted a couple issues about some contrib modules almost 6 months ago and never heard back. They
weren't that critical so I never followed up, but I have no idea if the mails
were even received or if they were just ignored.<br><br>- Scott<br><br>On Thu, Jan 14, 2010 at 2:33 PM, Markus Kalkbrenner <span dir="ltr">&lt;<a href="mailto:markus.kalkbrenner@arcor.de">markus.kalkbrenner@arcor.de</a>&gt;</span> wrote:<br>

<div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi!<br>
<br>
We discovered a critical security issue in Drupal 6 Core and wrote a mail<br>
about it to <a href="mailto:security@drupal.org">security@drupal.org</a>  more than two weeks ago. (2009-12-27)<br>
<br>
The only reaction so far was an auto response mail from<br>
<a href="mailto:security-bounces@drupal.org">security-bounces@drupal.org</a> the next day telling<br>
&quot;All e-mails sent to us are read by a member of the team and acted upon if<br>
necessary.&quot;<br>
<br>
Now I&#39;m not sure how to continue. Does it take more than two weeks to read<br>
through the mails and I just have to wait or is my message lost?<br>
<br>
Markus<br>
<br>
mkalkbrenner<br>
<a href="http://drupal.org/user/124705" target="_blank">http://drupal.org/user/124705</a><br>
</blockquote></div><br>