It looks like the team is having issues with updates.
You can hit up this guy here:
Any update guys?
From what it looks like all the vulnerabilities require access the the back-end so they are not so critical. Just lock your back-end down and make your admin passwords 10-16 long.
same here - will the patch also be available for Version 1.7, and when will it be available?
Updates for version down to 184.108.40.206 are available now.
The 220.127.116.11 patch needed a conversion of line endings for js/tiny_mce/plugins/media/editor_plugin_src.js
Afterwards it was applied fine.
They posted a few more of the patch versions:
I still dont see 18.104.22.168 - I asked on twitter, but no reply yet. Not sure whats going on.
Can anybody on Magento team clarify if 22.214.171.124 ever going to be uploaded?
I've just noticed that there's a 126.96.36.199 patch available for download now: