There's not much on this topic yet. @securityerrata started tweeting about it and trying to find out more: https://twitter.com/securityerrata/status/210550374627676160. Could be a hoax, or VUPEN keeps it quiet. We'll probably never know.