CVE-2017-9410, CVE-2017-9411, CVE-2017-9412, CVE-2015-9099 were all fixed in 3.99.5-r6. ref #11914
mentioned in issue #11914 (closed)