up to 5.4.16; fixes CVE-2013-2110