CVE now public.  updated tar balls and zips available.  thanks.