Like I said, the security-related bugs are handled differently from all non-security-related ones. They get hidden from the public bug tracker (for security reasons). Since the public bug tracker is what sends out the auto response emails, you won't get any for security-related bugs. You'll have to contact Adobe directly to get status updates.
-Carl V.