SPONSORED LINKS
I seriously think that we need to take some time to consider how Open Source projects do security. The "more eyes" mantra doesn't cut it.
Um, how do you think this problem was spotted? Read the mailing list post. There was a pair of eyes that found the bug, and he subsequently posted to the list.

In addition, a fix was checked in within four hours. 14 hours later, exploit code was posted to SecurityFocus, in the afternoon. Any admin who checked the lsh mailing list in the morning would have seen the error and the fix, and been well ahead of the exploit.

Score:5, Informative