* fixes bug 632879 and bug 499234 (which is CVE-2009-1573) Signed-off-by: Matěj Cepl <mcepl@redhat.com>