up to 5.3.23; fixes for CVE-2013-1643 and CVE-2013-1635