looks like there might be another patch missing:

Saw in the patch file, in file_save_upload, the following which wasn't in this version. I'll start a new issue for that, until I can track it down.

   // Add in our check of the the file name length.
   $validators['file_validate_name_length'] = array();