I think it's a big misconception that the labor pool for libre software is volunteers, it's paid -- by Red Hat, IBM, Intel, Canonical, etc. In this case, bash

I think it's a big misconception that the labor pool for libre software is volunteers, it's paid -- by Red Hat, IBM, Intel, Canonical, etc. In this case, bash had plenty of resources to be fixed quickly, it wasn't a problem at all. There's unwieldy projects like OpenSSL that probably have far too critical of a task for few too few developers, but generally, most open source products are developed by paid developers and are doing just fine