Comment Hah! There are much worse bugs! (Score 1) 234
I know an extreme SSL security bug delivered with Debian Perl packages (and probably many other distributions) since years.
If you want to know it, pay me. I have told them and no one reacted. Now I'm pissed off and let 'em bleed.