On: CVE-2014-7169: Bash Fix Incomplete, Still Exploitable

[andruby]

if you do it correctly by using zsh instead of bash, you would that it is not vulnerable

  env x='() { do_something;}; echo vulnerable' zsh -c "echo this is a test"
  this is a test