security hole fixed