Re:CVE-2014-7169: Bash Fix Incomplete, Still Exploitable
by scott_karana on Thursday September 25, 2014 @12:53PM
(#8368147)
For anyone who doesn't know, there's also a similar "yum-updatesd" for RHEL and derivatives like CentOS, though it only gives notifications of updates IIRC.
> ...but the distribution hasn't made a package yet.
On Ubuntu, I think you can probably set up a Launchpad PPA and then configure unattended-upgrades to automatically pull from it. Then just push what you need to that PPA when you're ready.
If you want to host the repository elsewhere, then that's possible too, but you probably want to start with a PPA since you don't have to worry about build and publishing infrastructure to start off with.