It looks like Ubuntu (and Debian by extension) patched it as well, I ran the test before and after an apt-get upgrade and got this output:
ronald@paragon:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test ronald@paragon:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" bash: warning: x: ignoring function definition attempt bash: error importing function definition for `x' this is a test Pleasantly, Ronald Bynoe ________________________________________ From: plug-boun...@lists.pdxlinux.org [plug-boun...@lists.pdxlinux.org] on behalf of Rich Shepard [rshep...@appl-ecosys.com] Sent: Thursday, September 25, 2014 9:14 AM To: Portland Linux/Unix Group Subject: Re: [PLUG] cross-platform bash vulnerability widespread On Thu, 25 Sep 2014, Damo Gets wrote: > Long story short, if you can execute this shell command: Damo, Slackware's dev team released a patched version yesterday evening. I'm upgrading all systems here. Rich _______________________________________________ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug _______________________________________________ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug