bash, bash_static: security fix for CVE-2014-7169