Apparently although the buffer management exploit was fixed, there is another buffer exploit, so users of 3.7 and below should upgrade to 3.7.1p1 -- John