[arch-security] CVE-2014-507