In advisory I believe vulnerable versions should be updated.
[,2.2.19.RELEASE]
Reason:
According to Patch, this patch was introduced between 2.2.19.RELEASE and 2.2.20.RELEASE.
2.2.19.RELEASE
2.2.20.RELEASE