- up to 2.4.9; fixes CVE-2014-0098, CVE-2013-6438; dummy-connection merged upstream