not getting the right response to vulnerability test

Bob Scott sandcastlebob at
Sun Oct 5 11:33:28 UTC 2014

I used "env x='() { :;}; echo vulnerable' bash -c 'echo hello'", discovered
I was vulnerable then performed upgrade. The subsequent test results in the
response "hello" without the bash statements:

bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'

Does the absence of "vulnerable" mean the updating was successful?

I am using Kubuntu 14.04

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the kubuntu-users mailing list