Is MachineKey security flaw patched in 2.7?

Topics: ASP.NET 2.0
Jan 31, 2013 at 9:57 PM
The default web.config in the web download for version 2.7 is still set to the value described in this post below. Did the 2.7 version not get patched before release?

http://www.dotnetblogengine.net/post/Security-Update-June-2012-Revision-A.aspx