DebianPlanet.com discusses that possiblity. "Some comments on the Linux Today story about
the recent glibc security update challenged my
perception that Debian is very responsive to
security problems in core packages. Basically,
they say that this vulnerability was reported on
December 14th. Has it really taken one month to
deliver a core glibc update?"
January 17, 2002