> Ubuntu 14.04 has updates including one for bash so I assume that update
> fixed the issue in the subject header

I am running ubuntu / unity 14.04 with... $ bash --version
GNU bash, version 4.3.11(1)-release (x86_64-pc-linux-gnu)

...and I would get this response to the vulnerability check...

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test

Last night I used the "Software Updater" GUI tool which updates from Ubuntu's mirror.xnet.co.nz repository and I noticed that one of the updates was for bash.

After the update the version number for bash is still the same... $ bash --version
GNU bash, version 4.3.11(1)-release (x86_64-pc-linux-gnu)

...However there is a change with the vulnerability check...

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test

cheers,
Ian.