Bash and Shellshock from a support perspective
What a last four days this has been! Certainly from the perspective of a support engineer dealing with this who on days one and two ended up going 43 hours without sleep.
Unless you've been off the grid for the last week, you would know about Shellshock (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186 and CVE-2014-7187).
To get the obligatories out of the way first, ...
Oracle has released a formal alert about this vulnerability which you can read at http://www.oracle.com/technetwork/topics/security/alert-cve-2014-7169-2303276.html
This document points to a MOS Note containing links to the fixes for this issue. Our current recommendation is to download all patches and IDR patches listed for your particular OS.