Sadly now known as HeartBleed, a vulnerability in OpenSSL has been discovered this Monday, April 7, 2014.
It potentially exposed all encrypted communications (webmail, online shopping, banking ...) since 2 years and allowed their potential decryption.
Because OpenSSL is free software, this vulnerability could have been effectively managed, from a purely source-code side as well as a deployment side and community involvement.