That has to do with CERT, who have a policy since last year of notifying vendors/distributors first, before publicly announcing a vulnerability.
And at the time CERT adopted this policy, some people predicted problems like this as a result (i.e., waiting to fix bugs until right before the public announcement).
112 posted on 11/28/2001 3:07:45 PM PST by B Knotts