See Security @ Atlassian for more information on our security bugfix policy.