Log Message: add the redhat fix for CVE-2014-0012; debian has an alternative but this is \ better for cgi