- up to 4.1.1, fixes CVE-2013-4475 and CVE-2013-4476