security bugfix
Merge branch 'master' into hoyt