addressing CVE-2014-0196 on prebuild boxes