I also used this to list my containers:
docker ps -la -n=100
And removed them all, then listed images: docker images
And removed them and then ran this to get the latest ubuntu installed from docker: docker run -i -t ubuntu /bin/bash
Then when inside the container ran: env X="() { :;} ; echo busted" `which bash` -c "echo completed"
The new docker image of ubuntu is still vulnerable.Edit: Updating the container then committing it (Docker terminology) should ensure that container stays updated, though any new runs creating new containers would continue to be vulnerable I suspect until Docker patches them or whomever would be responsible to do so.