security upgrade to 3.5.2