- updated to 2.5.4 (fixes a variant of CVE-2014-2240)