The bug is fixed in the latest security update that is starting to roll out.
Source link