git 1.9.4.20140929 cve fixes for bash