Open-source group issues Microsoft patch