CVE-2014-7169: Bash Fix Incomplete, Still Exploitable
What tools are people using to track and push out security updates, if any?  Right now I only have a few servers to administer so apticron is sufficient for notification and upgrading isn't a burden.Also, does anyone have a way to push out patched packages fast?  Imagine that a patch is available, or it's trivial to remove a feature that you're not using, but the distribution hasn't made a package yet.  I have been dreaming of making a system to help debian users create and manage a local set of packages, but haven't really had a chance to take it to a point where it'd be helpful in this scenario.My extended thoughts on the matter: http://stevenjewel.com/2013/10/hacking-open-source/