While I don't feel buffer overflows are something to ignore, from what I see the developer never actually said "unexploitable."
From the "skeptical glibc developer" link:
> if not maybe the one byte overflow is still exploitable.
Hmm. How likely is that? It overflows in to malloc metadata, and the
glibc malloc hardening should catch that these days.