It was disappointing to see that despite multiple months to do so, not one of the five packages implemented a patch before the public disclosure.