well, that's always a good idea (but as long as you have the XSS bug in SN patched, it's not that urgent, though). my oracle !sn runs even older code than yours