up to 5.5.13, fixes CVE-2014-0238 and CVE-2014-0237