[wp-hackers] fixes for old versions

[Steve Taylor]

> That is currently the plan.  Until 3.1 beta comes out 2.9 would continue to be security patched.

The site in question is 2.8.6 still. Until we're happy to upgrade to
2.9 (presumably necessary when 3.0 comes out at the latest, when 2.8
is no longer security patched), do I just download the 2.8.6 in the
release archive?

I'm unclear whether this version in the archive is security patched.
If you're still patching the previous version, wouldn't there be
2.8.7, etc.?