For those that pay attention to security issues, we were alerted to the "Shellshock" vulnerability on thursday (9/25/14) and we applied the security update to our server as soon as it became available. So our servers are secure from this vulnerability.

This is a huge security event. The bug allows anyone to issue any commands as the Apache web server user (with their permissions). Within a couple hours of the announcement, commercial servers and personal computers around the world were already being scanned for this vulnerability and infected with malware to scan for other computers and do who knows what else. The good news is that with Open Source software there is a huge community of geeks that find these vulnerabilities and report them so the development teams can issue patches. So if server administrators respond quickly it is easy to fix.

[UPDATE: 09/29/14]

We applied new security patches that were released for related vulnerabilities.