A more technical take from ZDnet http://www.zdnet.com/unixlinux-bash-critical-...ole-uncovered-7000034021/

'So patch this bug now or you'll regret it.'

Fortunately, most live on ubuntu and it's variants, with auto-update on, patch will be delivered shortly, opposed to windows where you have to wait till next months patch tuesday, or thereafter.

'Of course, the real fix will be to replace the broken Bash with a new, secure one. As of the morning of September 24, Bash's developers have patched all current versions of Bash, from 3.0 to 4.3. At this time, only Debian and Red Hat appear to have packaged patches ready to go.'

Another version of bash update arrived, updating the 4.3-7 from ubuntu1.1 suffix to ubuntu 1.3. One site posted a test to see if vulnerable, apple even claiming if everything was left default there were no worries.

https://www.digitalocean.com/community/tutori...lshock-bash-vulnerability

This includes instruction how to force the bash updates for various linux flavors.

Have you been bashing? Professionals would have picked up soon enough and those running servers and not picking up should be fired.

Would not be worried, just another 'stop the presses, look we found a bug' hyped event. You could always toy with the ugw firewall and set the 4-6 ips of wcg as the ones permitted through, default block for anything else.