The bug at the heart of this is already patched - but there's a lot to learn from this story anyway.