- up to 1.0.2; fixes CVE-2013-2062