e55cd2c
pull in upstream patch for CVE-2014-0160 - removed CHANGES file portion from patch for expediency