- up to 3.3.4; fixes CVE-2013-1752 and misc things