patchlevel 29, more CVE fixes