main/bash: upgrade to 4.3.026 fixes CVE-2014-6271 for good

(cherry picked from commit 0e42d8a9fdd07c17f52fbf4f80226c4200a1048f)