The bug they fix is the bug that keeps the API contract intact. The first application gets its bug fixed, and the second application breaks because it was relying on a bug that didn't match the API contract.
You program to an API, not to an implementation. The second application did the latter, and will therefore pay the price.