Segue os links para quem ainda não tem conhecimento da falha:
http://www.csoonline.com/article/2687265/application-security/remote-exploit-in-bash-cve-2014-6271.html
http://blog.erratasec.com/2014/09/bash-bug-as-big-as-heartbleed.html
http://blog.erratasec.com/2014/09/bash-shellshock-scan-of-internet.html
http://blog.erratasec.com/2014/09/bash-shellshock-bug-is-wormable.html#.VCO4x3XdVQI
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271
https://securityblog.redhat.com/201