Apple Support has released an update for the Bash bug that has been around since 1992

So what to expect when you install the new Bash update from apple.support.com/downloads/ to help with the shellshock bug.

As shown the old bash version (3.2.51(1)) echoed back "vulnerable" as well as "this is a test"
The new version (3.2.53(1)) will now not do that. You can test this yourself by using the bash code
env x='() { :;}; echo vulnerable' bash -c "echo this is a test"