It's potentially an opening, yes, so I do hope that bash receives further maintenance from Apple. At least the direct issue is mitigated for now.
----------
It took me 2 minutes total to add it to my deployment system. Presumably professional system administrators will be on top of this.
As for why it's not in Software Update? A huge mystery to say the least.
Wasn't hard to get into our SMS but it's peculiar that it's not in the general Software Update Catalogue after close to a day. Makes me wonder if there isn't a general security update coming soon with this rolled into it. If you are an organization that doesn't have a third party management solution and rely on an internal SUS to vet and release patches the manual patches could be a burden (though in that situation I imagine you're making liberal use of ARD).