Mega bad bug out. CVE-2014-6271

tl;dr RCE as long as you can insert data into a bash environment variable.

Pretty big news. Update all your bash. Red hat/CentOS is already covered, so is Debian stable (testing and unstable still vulnerable atm). !fediverse !crypto !umehack