Security update for bash (critical)

bash has been updated to fix a critical security issue.

In some circumstances, the shell would evaluate shellcode in environment
variables passed at startup time. This allowed code execution by local or
remote attackers who could pass environment variables to bash scripts.
(CVE-2014-6271)

Additionally, the following bugs have been fixed:

   * Fix crash when expanding '$[' without matching ']'. (bnc#844550)
   * Do not restart the signal handler after a trap is reset. (bnc#820149)
   * Work around a crash in libreadline. (bnc#819783)
   * Make skeleton files configurations files. (bnc#776694)

Security Issues:

   * CVE-2014-6271
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271</a>&gt;