The widely used open-source library has been patched to defend against a heap buffer overflow flaw that’s been in the code since its inception.