They released an official tarball with the CVE patches a little while after we pushed the CVE patches.