patch a security hole in UW