From what I have read it doesn't require a restart and takes effect immediately. I'm assuming you mean this bug ID with the bash code injection issues?
https://tools.cisco.com/bugsearch/bug/CSCur00930
"show tech version" from the CLI should show it is installed though or a "show version active"