We’ve already had our servers patched. If you’re concerned about this major vulnerability, here’s more information:
Shellshock is one of the oldest known and unpatched bugs in the history of computing. But its story isn’t that unusual. Earlier this year, researchers discovered another massive internet bug, called Heartbleed, that had also languished in open source software for years.
And some more:
- The “Shellshock” vulnerability in Bash (secunia.com)
- Bash specially-crafted environment variables code injection attack (securityblog.redhat.com)
- CVE-2014-6271 (cve.mitre.org)
- [Hub] Shellshock vulnerability (parallels.com)
If you have any questions, please let us know.