Hi!
https://sourceforge.net/p/project-open/discussion/295937/thread/17088009/
We've just posted a ShellShock advisory for ]po[.
Should OpenACS provide something similar, or is this too trivial?
We've done an exhaustive check for "bash" in all files and found a
few occurrences in the ]po[ specific code.
Cheers!
Frank