web/security: add forgotten CVE-2011-2161