- up to 5.0.1; fixes CVE-2013-1983