This version got missed from bug 168196. I just removed the vulnerable versions from the tree wrt bug 271685, this broke the sh stable tree. Sorry for the trouble.
sh stable, closing