Update CVE-2014-0165 and CVE-2014-0166 (Ref #448)