Update bundle, fix CVE-2014-348[2,3].