Hi

On Thu, Oct 2, 2014 at 4:04 AM, Richard W.M. Jones  wrote:
On Wed, Oct 01, 2014 at 10:39:04PM -0400, Rahul Sundaram wrote:
For Ubuntu the stated reason to follow Debian was pretty bogus[1] --

Ubuntu didn't follow Debian here.  It was the other way around.

It doesn't even avoid Debian & Ubuntu having a security problem, since
they still need to fix bash.

Sure.  Unless they stop shipping bash, they got to fix security problems.  That is no surprise.  The real question is whether it reduced the impact of the issue for their users.
 
What makes you think the dash doesn't have vulnerabilities too?

Do note that I explicitly avoided making any such specific claims and instead proposed it as a discussion point for a good reason.    Having said that, the general understanding appears to be that a minimal software with a smaller footprint has less potential issues.

Rahul