Mention security issue CVE-2010-3385
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3385

