- up to 1.29.1; fixes CVE-2014-0021