bash: backport patch to fix CVE-2022-3715

CVE Reference: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-3715



Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>