At least they didn't seem to try and make a point that the bug was discovered quickly. There have been "enough eyeballs" on this bug for 22 years and that stil

At least they didn't seem to try and make a point that the bug was discovered quickly. There have been "enough eyeballs" on this bug for 22 years and that still didn't help anybody actually spot it. Their tone seems to be more geared towards "look at how easy it is for anyone to get the fix", which isn't really all that great: most people don't have a toolchain in place that allows them to deploy new versions of bash from source in any automated fashion, so at the end of the day everybody just waits on a "vendor" fix anyway.