> On October 3, 2019, we disclosed...

> We reported this bug under a 7-day disclosure deadline rather than the normal 90-day disclosure deadline. We made this decision based on credible evidence that an exploit for this vulnerability exists in the wild and that it's highly likely that the exploit was being actively used against users.

It's now nearly two months since discovery of the bug and that it was being exploited in the wild, and my still-in-support Pixel still doesn't have the patch for this. What the hell Google. How is this even close to alright for a CVE such as this? Totally unacceptable.

Give me my damn PinePhone already!