- up to 1.4.4; fixes CVE-2013-4547