security fix as upgrading not currently working