Use forked illumos-extra for CVE bash fix