- up to 2.4.4; fixes CVE-2012-3499, CVE-2012-4558