- up to 1.3.7 (fixes CVE-2014-3504)