I've applied cgf's patch to Bash and test-driven it on my machine. The new version is available here:
e148fb06b6c856a591a985d86361da15 *bash-2.05b-16-src.tar.bz2 http://rlc.unsane.co.uk/release/bash/bash-2.05b-16-src.tar.bz2 837f987c5c5cbceb773bf14a32060bac *bash-2.05b-16.tar.bz2 http://rlc.unsane.co.uk/release/bash/bash-2.05b-16.tar.bz2 -- firewall needs cooling