- up to 1.8.10; better fix for CVE-2014-3636/CVE-2014-7824