preparing to tag 3.6.2 with xml security fix and improvements to report