main/bash: upgrade to 4.2.049 fixes CVE-2014-6271 for good