- up to 9.9.5; fixes CVE 2014-0591