security fix for CVE-2013-2094