Yes. Patch is out.
replace bash 4.1-2ubuntu3
apt-get update
apt-get install --only-upgrade bash
fwiw, Linode's mirrors are up with the latest version yet Digital Ocean's are not. I lose faith in DO everytime I remote into my VM. They just seen like an amateurish shop.
edit: and how do I know if I am still vulnerable?
edit2: ok, this is the test
env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
WIll tell you which version of bash is installed, for precise you should have bash 4.2-2ubuntu2.2
$ apt-cache show debian-goodies
<SNIP>
checkrestart - Help to find and restart processes which are using old
versions of upgraded files (such as libraries)