* SECURITY UPDATE: incorrect function definition parsing with
  here-document delimited by end-of-file
  - debian/patches/CVE-2014-6277.diff: properly handle closing delimiter
    in copy_cmd.c, make_cmd.c.
  - CVE-2014-6277
* SECURITY UPDATE: incorrect function definition parsing via nested
  command substitutions
  - debian/patches/CVE-2014-6278.diff: properly handle certain parsing
    attempts in builtins/evalstring.c, parse.y, shell.h, y.tab.c.
  - CVE-2014-6278
* Updated patches with official upstream versions:
  - debian/patches/CVE-2014-6271.diff
  - debian/patches/CVE-2014-7169.diff
  - debian/patches/variables-affix.diff
  - debian/patches/CVE-2014-718x.diff