Not to mention that their syntax is wrong and won't trigger the vulnerability in the first place.

  env x='() {.:;.} ; echo yo'
  *line 0: syntax error near unexpected token `{.:'*

It should be:

  env x='() { :;} ; echo yo'

Better luck next time.