FWIW CVS did sent out a letter via USPS (I use their mail order service) about the recall and the risk. I'm not sure what the "undisclosed bug" refers to.