Once again we are seeing GNU erasure with this "Shellshock" bug, people are treating it as a Linux security issue when it's really a GNU security issue. One that quite possibly predates Linux itself. Shellshock isn't a Linux security issue, as it affects systems that don't use Linux, like Mac OS X, BSD and Windows systems running Cygwin.

Systems that run Linux but not GNU, like Android, aren't affected. Embedded devices like routers often don't use GNU Bash either, and aren't affected. There are also a number of other shells available for systems running Linux that aren't affected.

I hope someone steps up and helps fund the development of the necessary patches to Bash, and more than that I hope if someone does fund Bash they fund the GNU Project specifically, not some specific distribution or fork of Bash.