I am just catching up on posts, forgot to mention I emailed "security@maemo.org" as requested and got a bounceback stating the email address was not recognised.

That sounds promising doesn't it...?