up to 5.4.13. fixes for CVE-2013-1643 and CVE-2013-1635