I'm guessing the commit message is obscured to give people more time to update before it's exploited in the wild.