I'm grateful to hear that y'all upstreamed patches to the other distros - that's true open-source sportsmanship.
Out of curiosity I checked the patch timeline elsewhere:
- 2023-07-07: iperf security advisory w/ patch
- 2023-07-09: Alpine, Wolfi, Chainguard Images
- 2023-07-10: ArchLinux
- 2023-07-17: CVE published
- 2023-07-17: Debian stable
- Not yet: Oracle, RH
Unsurprisingly, the timeline follows the continuum of how each distro treats security vs stability.