The popular shell Bash has a bug that could be as bad for the internet as Heartbleed - or even worse.