CERT advisories take a few weeks quite often. CERT are aware of the matter
and do have a copy of the code. I can't comment on the precise details of
the McAffee claims. CERT won't release an advisory until the technical
details are known, there is at least a workaround, all vendors have studied
the issue and the data is known to be accurate
Alan