upgrade bash to fix CVE-2014-6271