super: fixed url to source and added patch for CVE-2014-0470