Security fix for CVE-2018-1285