Vendors can take months to create patches, and sometimes users grumble about that,.. But the alternative is to have patches that can be circumvented or aren't appropriate for the vulnerability. It's a difficult balance.
Thomas Kristensen