Is 12 hours to deliver a local privilege escalation fix not a good response time?