Drupal’s advisory also included three patches for “moderately critical” bugs.
Source: Threadpost