If you look at the timeline it details they disclosed the exploit and Google marked as won't fix which seems fair game for public release at that point.