bumped dependencies to mitigate CVE-2014-7818 and CVE-2014-7819