Fix CVE-2014-0160 patch to always upgrade packages rather than just ensuring their presence