Security vulnerability pre-announcement: 20160419