If you are worried about Bash CVE-2014-6271 (you should) and don't want to wait for Hydra to re-build the world, then check out https://github.com/NixOS/nixpkgs/pull/4257#issuecomment-56727114 to see how to replace the bash binary in your running system without triggering re-builds. Peter