file: update to fix CVE-2014-2270, CVE-2013-7345