- rel 2; fixes CVE-2014-3494