- updated to 2.6 (fixes CVE-2013-6401)