21 security fixes, including a critical file write/read and a possible RCE, both via crafted uploads.