fix software vulnerabilities