The bug at the heart of this is already patched – but there’s a lot to learn from this story anyway.