And in the situation where they released a security patch 2 months ago, there would be a security patch before the bug was public.
reply2 months ago there was no patch and no possibility of a very quick patch. Releasing details then would have been very bad.
replyIf you mean they should have released the patch as soon as it was done, it's true that it would have been before the bug was public... for about five minutes. When a warning a day or two before patch release works, it lets admins prepare to patch immediately and/or shut down their servers before the release time.
Even with the leak, admins still had warning and it was better than an unwarned official patch drop. Which itself is better than an unwarned unofficial patch drop. Which itself is better than an unwarned drop of exploit details.