SECURITY: upgrade CVE-2014-6271 bash vulnerability