bash is fixed upstream

better paranoid than hacked