Information on the critical flaw was made public in September; patches should be applied ASAP, says SANS Technology Institute ...