Security patches need patches ... Note