There is a critical bug (shellshock, CVE-2014-6271 and
CVE-2014-7169) than needs to be fixed in bash. All users should
update their current version of bash according to the instructions
at:
http://www.linuxfromscratch.org/lfs/view/development/chapter06/bash.html
Note1: The suffix in bash-4.3-upstream_fixes-4.patch has changed.
Note2: Older installations of bash versions before 4.3 may also need to also install readline-6.3.