Hi, This patch does not seem to work on HP-UX:
$ ./bash --version GNU bash, version 4.3.25(1)-release (ia64-hp-hpux11.31) Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software; you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. $ ./bash $ <CTRL-X CTRL-V in emacs mode displays the version to> GNU bash, version 4.3.25(1)-release (ia64-hp-hpux11.31) $ /usr/bin/env x='() { :;}; echo vulnerable' bash -c 'echo hello' vulnerable hello Any hints? Thanks in advance! Michael
