- fix for CVE-2014-3587