up to 5.5.2; fixes CVE-2013-4248