Or they could have pushed a minor security upgrade that fixes this bug. For free. It's probably a simple buffer overflow bug and can be fixed with a change to o

Or they could have pushed a minor security upgrade that fixes this bug. For free. It's probably a simple buffer overflow bug and can be fixed with a change to only a few lines of code. After the problem has been identified, it takes roughly 10 minutes of coding to fix the issue and perhaps a day or two for regular testing and distribution processes.