Yet another moron heard from. In the open source world, as soon as someone discovers a security flaw, it is announced. Unlike the Microshaft world where someone gets shafted, then 3 weeks later the security flaw is announced.
That's not what the article says:
"...Core Security Technologies alerted them to the problem Nov. 14."
"...a situation worsened when Red Hat mistakenly released information on the flaw early, leaving other Linux companies scrambling to get a fix out."
"The fix is not rocket science," Huger said. "But we weren't working at a breakneck pace to get a patch out, because everyone was working together."
"...but other Linux software sellers had expected any advisories to be published Dec. 3, giving them time to work on fixes"