It is wrong. The author is known, was acting in good faith, and simply fucked up really badly.

I don't know what 11 years ago has to do with anything, besides the awful lifespan of such a severe bug.

> GNU organization

> giant security flaw

Checks out.