[dpcan]

All of the “suggestions” involve letting a pretty nasty bug persist in the wild. I can see why time was of the essence for them. Backlash from knowingly letting a bug be in production and exploitable would probably mean even bigger problems for them. Holidays? Too bad so sad. Maybe the author here should have waited until January to tell them about it… asks for urgent attention to a bug right before the holidays. Gets surprised when the urgent bug is fixed urgently. I don’t understand people anymore.

[jecwick]

It was a month after I reported it. So not actually fixed urgently. And I didn't mind fixing it over the holidays, but a pain to explain it my end users over the holidays.