So from what I can tell, neither my Raspbian or Ubuntu setups have this second vulnerability properly patched yet (although they have the first one).
I guess I'll just have to wait until it becomes available. They're usually pretty responsive about issues like this.