said by »www.microsoft.com/technet/securi···040.mspx :Upon completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a solution through a service pack, our monthly security update release process, or an out-of-cycle security update, depending on customer needs.
I'm betting on the "out-of-cycle" option here. There's no way that this can wait till the next patch release next month. I know that this will be a priority patch when it comes down the pipe at work, even though all of our SQL boxes are behind firewalls.