--- a/lib/update.updates	Tue Dec 17 00:26:44 2013 +0200
+++ b/lib/update.updates	Tue Dec 17 01:17:49 2013 +0200
@@ -36,10 +36,10 @@
         [ $update ] && continue
 
         # check
-        if [ ! -e $dep ]; then
+        if [ ! -e "$dep" ]; then
             fail "$out: Missing source: $dep"
 
-        elif [ $out -ot $dep ]; then
+        elif [ $out -ot "$dep" ]; then
             debug "  update: $dep"
             update=y
         else