This is SOP for major open source projects. Most security release announcement lists for major projects consist of big companies whom would be most at risk to a

This is SOP for major open source projects. Most security release announcement lists for major projects consist of big companies whom would be most at risk to a 0day exploit. There is usually an embargo period during which said large companies get to patch their systems before the release goes public.