update fifo base to standard64 14.2.1 to address shellshock

[liyu1981]

joyent has released new images as

HI everyone,

We just released the following images to images.joyent.com and the Joyent Public Cloud:

• standard 14.2.1 (4ac797fa-47dd-11e4-a0f1-3ba648116698)
• standard64 14.2.1 (3f57ffe8-47da-11e4-aa8b-dfb50a06586a)

This release comes with an updated version of Bash (4.3.025) from pkgsrc to address CVE-2014-6271 and CVE-2014-7169.

Documentation and release notes can be found here:

http://wiki.joyent.com/jpc2/Standard+Instance

update to 14.2.1 to avoid shellshock

[liyu1981]

Above are standard datasets update. However, in DogeOS we use base datasets, which reuse the GZ's bash.

For GZ bash, the one in smartos v20140501T225642Z is affected by shellshock (CVE-2014-6271). The patch of upstream is landed in TritonDataCenter/illumos-extra@69d0597, which will packed in after smartos version >20141002.

But currently, project FiFo does not have a tested smartos version for 0.6.0 whose version > 20141002. So this may be left for next release of DogeOS.

The security issue is there, but can be minimized.