Adeodato Simó wrote:
"Publish to distributions" is effectively the same as making it completely public, so they won't.
Wrong. <http://www.mozilla.org/projects/security/security-bugs-policy.html>