This binary release includes bash-92.tar.gz (3.2.51 from http://opensource.apple.com/) and the bash32-052, bash32-053, and bash32-054 patches (from http://ftp.gnu.org/gnu/bash/bash-3.2-patches/) that includes the full patches to shellshock (CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277).
This was compiled on Mac OS X 10.9 Mavericks with Xcode 6.0.1 (6A317).
The macosx-bash-92-shellshock-patched.pkg installer package is built using my package.sh script included in the Git repository, with arguments com.idorosen.pkg.macosx-bash-92-shellshock-patched 3.2.54-20140928.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.