So when is a bug fix release coming? It's been more than a year now...

There are bug fixes in this release. We were unable to separate the bug and security for this one.

The "must reapply custom hot fixes" threw me. It looks like the qoq bugs are fixed, so we don't need to reapply those? But we do need to reapply others?

Tim, correct. Mostly the "reapply hotfixes" is for custom patches we may have provided that have not been listed as fixed. Apologies for the miscommunication. And yes, the QoQ is finally patched.

Still no love for the scope corruption bug 😞