Security fix for CVE-2016-1254

—-

update to upstream release 0.2.8.11

—-

update to upstream release 0.2.8.10