We have received reports that the bash shell had a problem with very long pathnames. When a very long path was encountered bash failed to check the result of getcwd() in all places, which could be exploited.
We recommend you upgrade your bash package immediately.