added new security concern to fixes.txt