This is a variant of the shellshock bug for bash that still works on a patched system. I am using Ubuntu 14.04 and this still works for me. env VAR1=’me() {echo "hello"}\ ‘ /bin/touch /home/$LOGNAME/my.textenv VAR1=’me() {echo "hello"}\ ‘ /bin/touch /home/$LOGNAME/my.text So you can still put arbitrary content after the function definition in a bash …

I ran yum-update on my Fedora 19 installation today and I got this error. [email protected] homer# yum update Loaded plugins: fastestmirror, langpacks, refresh-packagekit Loading mirror speeds from cached hostfile * rpmfusion-free: rpmfusion.mirror.uber.com.au * rpmfusion-free-debuginfo: rpmfusion.mirror.uber.com.au * rpmfusion-free-source: rpmfusion.mirror.uber.com.au * rpmfusion-free-updates: rpmfusion.mirror.uber.com.au * rpmfusion-free-updates-debuginfo: rpmfusion.mirror.uber.com.au * rpmfusion-free-updates-source: rpmfusion.mirror.uber.com.au * rpmfusion-nonfree: rpmfusion.mirror.uber.com.au * rpmfusion-nonfree-debuginfo: rpmfusion.mirror.uber.com.au * rpmfusion-nonfree-source: …