sync with security wheezy/updates, fixes CVE-2014-7169

See [CVE-2014-7169](https://security-tracker.debian.org/tracker/CVE-2014-7169).
```
proppy@noir:~$ docker run -ti google/debian:wheezy /bin/bash
root@39f4cc566255:/# ls
bin  boot  dev	etc  home  lib	lib64  media  mnt  opt	proc  root  run  sbin  selinux	srv  sys  tmp  usr  var
root@39f4cc566255:/# X='() { function a a>\' bash -c echo

root@39f4cc566255:/# ls
bin  boot  dev	etc  home  lib	lib64  media  mnt  opt	proc  root  run  sbin  selinux	srv  sys  tmp  usr  var
root@39f4cc566255:/# ls echo
ls: cannot access echo: No such file or directory
```