This is a pretty coordinated release, I think the ubuntu security team probably has packages ready to be released. The security repository should have the update right away.
Had quite a few packages updated on my Ubuntu servers today and believed it was this issue. But seeing this is still embargoed it looks like these weren't updates for this problem? Or is Ubuntu releasing binaries but keeping the sources embargoed?