Re: Shellshock-vulnerable version still most obvious on ftp.gnu.org

[Ian Jackson]

Chet Ramey writes ("Re: Shellshock-vulnerable version still most obvious on 
ftp.gnu.org"):
> On 11/6/14, 7:47 AM, Ian Jackson wrote:
> > But in the current environment it's looking rather quaint.  We could
> > probably provide a full tarball for each patch release.
> 
> That is supposed to be one of the advantages of using git.  You can always
> get a tarball of the latest release with all patches applied using
> 
> http://git.savannah.gnu.org/cgit/bash.git/snapshot/bash-master.tar.gz

Right.  That's great.  But that's not the official primary
distribution channel for bash, as I understand it.

Thanks,
Ian.