Howdy all,
I've just rolled out version 1.710 of Webmin to all repos. Some of our repos have been (intentionally) trailing behind on the Webmin release, so some repos are coming up from 1.690 (there was an annoying bug in 1.700, so we skipped it for some repos, and put 1.701 into some repos). But, this release was rushed out to help mitigate the bash shellshock exploit.
In a system with an exploitable bash version, Webmin could, theoretically (I don't know of any exploits in the wild, but it's probably only a matter of time) be used to provide privilege escalation to root for attackers who had already obtained user level access via other vectors, such as an attack through Apache or Postfix.
In short, updating bash is vastly more important than updating Webmin, but since bash wasn't historically in our list of updates to list in the front page, this may help prevent a serious problem from becoming even more serious. We've rolled out a new security-updates package, as well, to help insure all Virtualmin users have updated their bash package.
Changes since 1.690:
Changes since 1.700:
As always, let us know if you run into any problems.