My takeaways are to redouble my efforts to vet software I rely on, and to appreciate my distros more. It looks like Debian, Ubuntu, Fedora and possibly many others had quietly spotted and resolved the issue in their distributions even before this bug report.