FWIW, according to Francis Barr in today's Security Reader Report (MacInTouch Oct 4) 'the latest Yosemite 10.10 beta 4 updates bash from version 3.2.51 to 3.5.23 […] suggesting that it has patched the Shellshocked vulnerabilities'.
Unfortunately Yosemite Beta 4 is not available for download at the moment, at least not from Apple.
If we knew what it was we were doing, it wouldn't be called research, would it?