patch for CVE-2013-0722