Bash security update published by Redhat

[accounts]

For redhat based systems the test I mentioned above is here: https://access.redhat.com/articles/1200223

[david]

Seems to be the correct version though?

https://rhn.redhat.com/errata/RHSA-2014-1306.html

[accounts]

I have that version installed. Heres another test that should work on any nix version:

env var=(){(a)=> bash -c "echo vulnerable to CVE-2014-7169"; /bin/true

[iseletsk]

What exactly do you think it tests? You are basically running:

bash -c "echo vulnerable to CVE-2014-7169"

of course it will print out: vulnerable to CVE-2014-7169
No injection here, bash just executes "echo ...." command.

[accounts]

Got that test from another website, but will presume your answer is the right one.