That's also what happened to the SSL 3.0 RFC after the POODLE attack was discovered, they published a new one that deprecated its use.
SSL/TLS session is transient thing. Therefore, it's less painful to migrate to upgrade/patched new protocol - although it's not completely painless, because there's many situations where installed old software can't be (easily) upgraded.
Agreed.
