bump to 3.9.2, security release