XSS Vulnerability - 1 about drupal HOT 2 CLOSED

This is about a vulnerability in jQuery UI, which isn't included in Drupal 6 core. There was a security release made for the jquery_ui module:

https://github.com/d6lts/jquery_ui/releases/tag/6.x-1.6

... however, this vulnerability actually doesn't apply, because the versions of jQuery UI used by the D6 'jquery_ui' module (1.6 and 1.7) don't include the position plugin.

from drupal.

It is possible that this vulnerability is exploitable with some Drupal modules. As a precaution, this Drupal security release applies the fix for the above cross-site description issue, without making any of the other changes to the jQuery version that is included in Drupal.

It says that the fix was made in Drupal Core, and not in jQuery UI module.
jQuery UI module stayed untouched regarding this vulnerability.
So, is there a plan to issue a Drupal 6.60 to fix this?

from drupal.