Many eyes worked in this case.. It just took a long time to find. The question now is what will it find next and when?
The combination of time and severity in this case should mean that we can move on from naive 'all bugs are shallow' dogma towards developing a more evidence-based approach to the verification of critical software.