Chet Ramey writes ("Re: Shellshock-vulnerable version still most obvious on ftp.gnu.org"): > On 11/6/14, 7:47 AM, Ian Jackson wrote: > > But in the current environment it's looking rather quaint. We could > > probably provide a full tarball for each patch release. > > That is supposed to be one of the advantages of using git. You can always > get a tarball of the latest release with all patches applied using > > http://git.savannah.gnu.org/cgit/bash.git/snapshot/bash-master.tar.gz
Right. That's great. But that's not the official primary distribution channel for bash, as I understand it. Thanks, Ian.