Fix a silly bug introduced earlier, update bundle for CVEs.