Its not just Canonical but yes when a few month ago the local root exploit appeared, it wasn't fixed for a few days either.

It’s been nearly two weeks, a bit more than “a few days”