Re: Incomplete patch (Score: 2, Informative)
by seriously@pipedot.org in Vulnerability in Bash Shell widespread and serious on 2014-09-25 12:32 (#2SXA)
This has been refuted in the same bug report, so zsh is safe from this issue. You can consider the upgrade ;)