fixed in Factory, no need to track it as security incident anymore. The request for adding a maintainer still stands