A disclosure deadline passed. The patch did not ship.

Ninety days is the convention, not a rule. What happens when a vendor lets it lapse is decided case by case.