This release fixes CVE-2016-1249 (out-of-bound read when using server-side prepared statements) and CVE-2016-1251 vulnerability (a use after free when using prepared statements).