This bug was found by a Redhat security auditor. It's a bit unfair to pose this as an obvious bug that should've been found at any point in the past 25 years, b

This bug was found by a Redhat security auditor. It's a bit unfair to pose this as an obvious bug that should've been found at any point in the past 25 years, because I'm pretty sure that Redhat has had security auditors for a long while. Although probably fewer in number than Microsofts security auditor team they are likely faced with the same problem: A huge backlog of old crufty software written in arcane style using programming languages that discourage proper structuring, riddled with bugs promoted to features for backwards compatibility reasons. What we really should be doing is reimplementing software like this, learning from predecessors, and making sure software that depended on bugs of the past are fixed so they don't. Since we're in the open source world, we don't have to end up the same as Windows did.