[Bug 1205210] New: update tumbler to 4.16.1 for security issue