- up to 1.14.4; fixes CVE-2013-4396