mupdf: fix CVE-2014-2013 by upstream patch