CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow
This is embarrassing.  We now know that the line "with many eyes, all bugs are shallow" is just wrong. What we do know now is that the open source process does not converge to a no-bugs state.It's time to start phasing out C/C++. Languages which don't know how big their arrays are have to go.  If it can run efficiently in a garbage-collected environment, it should be in Go or some scripting language.  If it can't use GC, Rust is almost there.  (As I say occasionally, I really hope the Rust guys don't screw up.) C and C++ should not be used for new work.It has been 1 days since the last buffer overflow vulnerability report.