this release fixes a vulnerability reported 10 years ago

https://www.kb.cert.org/vuls/id/319816