LOL We overlapped. I mention the timeline in the other thread. Yeah, the timeline confuses me. If you follow the security releases, they're often fixed in a matter of days - depending on severity. This one was almost a full year.
But, I think I am making sense of it now... They didn't realize it was exploitable at first. I'm gonna see if I can find the first bug report.