For anybody curious, here's the current status of the CVEs on Ubuntu and Debian. tldr, patches haven't been released yet

* https://ubuntu.com/security/CVE-2022-28693

* https://ubuntu.com/security/CVE-2022-29900

* https://ubuntu.com/security/CVE-2022-29901

* https://security-tracker.debian.org/tracker/CVE-2022-28693

* https://security-tracker.debian.org/tracker/CVE-2022-29900

* https://security-tracker.debian.org/tracker/CVE-2022-29901

When the article says "scrambling", this is what it means. Normally there's enough time before disclosure for a patch to be prepared and sometimes even released. I wouldn't consider the phrasing of the headline an exaggeration this time.