- up to 1.8.1; fixes CVE-2013-4131