Includes fix for CVE 2017-0381. Assume maintainership. Signed-off-by: Ian Leonard <antonlacon@gmail.com>