We have been compiling some of the older versions of bash to fix vulnerabilities, and for the most, has been working.
However, when we patch the 013 patch for CVE-2014-7187, and run the nested loop, it's still showing as vulnerable. Has anyone else had a similiar experience? Thanks for the help, D