Security Advisory: Unauthenticated Denial Of Service

Been a long day, so if I’m getting this wrong apologies. The CVE was posted a day before the fix correct? But its been an issue for a few months, since May. Is there any where else this would have been acknowledged before a day before?

Also can’t official partners get this info before the fix and its put on a CVE?