I'd like to know the software company's side of the story. If the bug is rare enough (half a million people treated successfully so far) and the bug's outcome is not serious, then an emergency upgrade may not have been necessary. What we're missing here are the consequences for the patient in a worst case scenario. What we do know is that this particular patient apparently wasn't harmed (in any way?).