patch bash to fix CVE-2014-6271 and CVE-2014-7169