Amazon's Linux distro for EC2 is still waiting for a patch.
EDIT: Finally got things updated. Bulletin can be found here: https://alas.aws.amazon.com/ALAS-2014-418.html
If yum isn't finding the update, try running "yum clean all" and then "yum update bash"