CVE-2014-0178 patch for 3.6