critical fix for XML bug CVE-2013-0156