Holy crap, they are showing in apt… why in the world wouldn’t they update the dang CVE page?!
I agree though, this took too long.
Likely needs a human from another department to press a button, and they have not "synced" with the team publishing the patch.
Thank you for this! Finally patched