fixing attr_protected CVE-2013-0276
fix serialization vulnerability
bumping to 2.3.17
Merge branch '2-3-sec' into 2-3-stable

* 2-3-sec:
  bumping to 2.3.17
  fix serialization vulnerability
  fixing attr_protected CVE-2013-0276