- up to 9.9.4; fixes CVE-2013-4854, CVE-2013-3919