bash: update to patchlevel 025 and apply 2nd patch for CVE-2014-6271.

See http://seclists.org/oss-sec/2014/q3/690