up to 5.3.28 (released on 2013-12-12)

fixes CVE-2013-4073 and CVE-2013-6420