This release has a large number of security updates. Please update ASAP.
Some of those bugs may be could possibly used for remote code execution, even so that has not been
demonstrated, yet.
I would like to thank Chng Ming Shin who sent in a number of bug reports along with code demostrating the issues. I would also like to thank Tristan for his reports on security bugs (which have been fixed in 1.29.0).