http://ftp.gnu.org/pub/gnu/bash/
Just had to manually patch a CentOS4 legacy system.
What I find interesting is the patch has been around since the 16th, what took so long and what finally lit a fire under the mainstream *nix releases?
Jesus. That's been out of support for well over 2 years. I can't imagine this is the only problem it has. I'm curious: what's keeping the organization from upgrading it?
You find a lot of that type in education/local government.
(ancient openssl never had tls heartbeat feature)
But Redhat actually still supports EL4 through their ELS program and releases patches for it until March 31, 2017
https://access.redhat.com/support/policy/updates/errata#th-r...
CentOS simply decided not to keep up with it anymore, cannot blame them.
Variety is the spice of life, and all that...
$ uptime
07:26:20 up 3280 days, 16:23, 2 users, load average: 0.00, 0.00, 0.00
$ cat /etc/issue
Debian GNU/Linux 3.1 \n \l