Small request - wouldn't it make more sense for the security page to link to the fix revisions on the 2.x branch instead of the mainline?