Update to 1.28 which fixes a buffer overflow (that will be)
documented in CVE-2017-17663.

Reviewed by: matthew (mentor)
Approved by: matthew (mentor)
MFH: 2018Q1
Security: f5524753-67b1-4c88-8114-29c2d258b383
Differential Revision: https://reviews.freebsd.org/D14218