Comment by amaccuish

True they could have been clearer on the versions affected, but tbh you should keep with the latest supported anyway.

Security bug reports are often restricted for some time after a new release to help prevent reverse engineering to find the bug.