The moment it was made public information, there was absolutely no reason whatsoever to hold back on marketing it. Even if your chosen Linux distribution isn't quite ready to go with an easy fix, by being aware of the problem you're a lot more prepared to deploy a fix the moment it becomes available.
The only people that holding back (after the vulnerability becomes public knowledge) helps are the attackers.
The only people that holding back (after the vulnerability becomes public knowledge) helps are the attackers.