mumble: fix Mumble-SA-2014-001 (CVE-2014-0044).
mumble: fix Mumble-SA-2014-002 (CVE-2014-0045).
Merge remote-tracking branch 'upstream/master'