bring HEAD up to date, add CVE-2010-3864 fix, update NEWS files