- updated to 3.6.17, fixes CVE-2013-4124