On Thu, 7 Mar 2002, Michael G. Schabert wrote:
> OpenSSH got a report of the bug today. And they already released the
> new version to fix it TODAY.

Actually, they got the report a few days ago... it's standard practice
to let the vendor/author/whatever know first, before telling the whole
world about it.

As the advisory at http://www.pine.nl/advisories/pine-cert-20020301.html
says, "Vendor informed: 20020304"
-- 
Name: Dave Huang         |  Mammal, mammal / their names are called /
INet: khym@azeotrope.org |  they raise a paw / the bat, the cat /
FurryMUCK: Dahan         |  dolphin and dog / koala bear and hog -- TMBG
Dahan: Hani G Y+C 26 Y++ L+++ W- C++ T++ A+ E+ S++ V++ F- Q+++ P+ B+ PA+ PL++