Harry Putnam <reader@newsguy.com> writes:
> The Wanderer <wanderer@fastmail.fm> writes:
>
>> I have (trimmed for brevity):
>>
>> ========
>> $ apt-cache policy bash
>> bash:
>> Installed: 4.3-9.1
>>
>> $ bash --version
>> GNU bash, version 4.3.25(1)-release (x86_64-pc-linux-gnu)
>> ========
Egad I neglected to post this below above
x='() { :;}; echo VULNERABLE' bash -c :
VULNERABLE
or
env x='() { :;}; echo vulnerable' bash -c 'echo hello'
vulnerable
hello