- rel 4; fixes CVE-2013-1667