security update, fixes #10