Old news - both of these vulnerabilities made top headlines on HN. This post isn't contributing much.
(Tangentially, the title of this article is egregiously difficult to parse.)