Since all versions in 1.x is considered backwards-compatible, the latest version is typically the one supported for updates.
In case of a new major version, securty updates would be issued for the previous version on a best-effort basis.
Do not open a ticket, but send an email to dev-security@.