docs for 3.6.1 plus security notification