Just been reading about this potentially serious Linux based bug. It would seem that Azure should be on the safe side, as being Windows based, and most likely quickly patched, as that is why we use Platform As A Service (PAAS).
For anybody wondering what this is all about Try Hunt has a good article at: Troy Hunt's Article
Any comments from anyone on this, or pointers?
Thanks.
Azure WebSites is safe with respect to ShellShock. Azure WebSites uses IIS as our web server and we do not expose any external anonymously-accessible endpoint which exposes/calls Bash.
Note that we do install Bash as part of our VM installation (it comes with Git). But we do not expose any vector for calling into this shell remote/anonymously. We will be updating Bash for caution-sake.