Comment by InsidiousWombat

If mitigation is known, it should be posted as soon as it is found. Not "wait patiently for packages to update and hope to not get hacked".