OpenMage/magento-lts — pull request #2 by tmotyl (2014-10-29 09:56:16+00:00)
Title: SUPEE-1533 - Addresses two potential remote code execution exploits

This is an official patch from Magento.
see more on http://www.magentocommerce.com/knowledge-base/entry/security-add-handler