Update to 2.5.7. This release fixes CVE-2015-8077 and CVE-2015-8078.
MFH: 2015Q4 Security: d62ec98e-97d8-11e5-8c0e-080027b00c2e