Apple is not more late than the Linux community.
So what is your point? That there are still 'Mac OS X' server oses around? Or do you really want to claim that there are morons using Mac OS X Server editions to run CGI bash scripts from an Apache web server?
Who actually is doing that? I never heard about a person using CGI _and_ a shell (what ever shell) ... regardless of the current security hole I can tell you a few dozen more.
Running shell scripts by a web server as CGI scripts is simply retarded, regardless what flaws the shell might have.
So picking on Apple because a fix is a day later than the hot debian or ubuntu distro is just brain dead.