Backport bash security fixes to 2014Q2.