I suspected that the security fixes were duplicated, but these changes from the 3.09 changelog are missing: