As per comment #5 on bug #1373781, the executables appear not to have been updated to their patched versions (forgot to recompile, I guess?) before the packages were generated.
Appears to be the case all bash and bash-static packages of the 4.3-7ubuntu1.2 ilk. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1374207 Title: CVE-2014-7169 fix not effective on trusty To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1374207/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
