They'll probably release it earlier, that's what they said in the announcement in case the CVE got leaked sooner.