You can read all the details here and here, but below is a synopsis for quick checks.
Are you vulnerable?
env 'VAR=() { :;}; echo Bash is vulnerable!' 'FUNCTION()=() { :;}; echo Bash is vulnerable!' bash -c "echo Bash Test"
Thoughts of Digitalw00t