On: 3rd Shellshock Vulnerability Found

[acqq]

It's actually not "new" it's a "feature" that everybody became aware it existed since long ago only once Shellshock bug became known.

Christos Zoulas from NetBsd has the arguments that I really like: it's a "feature" that was widely unknown and that should be disabled by default:

http://openwall.com/lists/oss-security/2014/09/25/31