What a bunch of arrogant f'ng aholes.
Of course this warrants a new release. It IS a security flaw.
And while they are at it, they can eliminate the 16 parameter "bug" and let friggin identifiers be longer than 32 characters.
End of rant.