[arch-security] CVE-2014