bash package source files. we'll only run our own bash package temporarily to address CVE-2014-6271, once at least 4.3.024-2 comes through from Arch to our stable branch we can stop using our own package https://forum.manjaro.org/index.php?topic=16677.0