[development] No reaction on security mails?

Hi! We discovered a critical security issue in Drupal 6 Core and wrote a mail about it to security@drupal.org more than two weeks ago. (2009-12-27) The only reaction so far was an auto response mail from security-bounces@drupal.org the next day telling "All e-mails sent to us are read by a member of the team and acted upon if necessary." Now I'm not sure how to continue. Does it take more than two weeks to read through the mails and I just have to wait or is my message lost? Markus mkalkbrenner http://drupal.org/user/124705