- up to 1.2.2; fixes CVE-2013-2063