@Chris Thanks for the additional information from the hackers list (which I do not particpate in, and hence wasn't privy to). I do assume everyone knew from Matt's comments -- "been there for years, it’s just no one has noticed it until now" sounds at first read that it wasn't addressed until someone outside of development brought it up.

@Joss See above reply. I see what you are talking about now.

@Ben The only downside is two minor release updates within almost one week of one another. It doesn't inspire confidence in the general public, although those experienced with WP know things are perfectly fine.