> But I know someone is going to ask: Can you apply all of the newer
security fixes to 0.9.8zh? So I'll ask...can I?
The project stopped supporting 0.9.8 2+ years ago, and announced its plans 3+ years ago. Backporting fixes from 1.0.2 should be possible, but won't always be easy.
It might be worth contacting your vendor.