bundle update for CVE-2014-7819