Re: Shellshock-vulnerable version still most obvious on ftp.gnu.org

[Glenn Morris]

Chet Ramey wrote:

> (The link is to
> http://git.savannah.gnu.org/cgit/bash.git/snapshot/bash-master.tar.gz).  I
> cannot change the main bash webpage to include that text.

I'm not sure what you mean by that last sentence; but just in case you
don't know, anyone with write access to the code repository for a
gnu.org project on Savannah also has write access to the web pages
repository.

Simply follow the instructions at http://savannah.gnu.org/cvs/?group=bash
to checkout the web-pages repository, ie:

  export CVS_RSH=ssh
  cvs -z3 -d:ext:<membername>@cvs.savannah.gnu.org:/web/bash co bash

Simply committing a change to CVS will update the gnu.org web pages
almost immediately.