updated to 1.5.3; fixes CVE-2013-4242