Why are these things being disclosed before fixes have been rolled out? Is no-one following disclosure protocols any more?