bug fixes, security fixes* I /think/ we had patches for the mentioned CVE's, but another pair of eyes is appreciated.