main/bash: updated to 4.3.28, fixing CVE-2014-7186 and CVE-2014-7187