some details about past security hole