Mozilla notified us of one security issue the day before they published their public advisory. They did not wait for us to come back with an ETA for a fix: they kept their bug reports containing the details of the exploits closed to the public for a few days, and now opened most of them to everybody.