- up to 1.4.15, fixes CVE-2013-4402