It's in software update, at least in my system.
Doesn't appear to be a bug-fix for the earlier 1.0 update, more of an addendum:
Security Update 2006-002 is recommended for all users and improves the reliability and security of the following components:
apache_mod_php
CoreTypes
LaunchServices
Mail
Safari
rsync
Additionally, this update incorporates Security Update 2006-001, which improves the security of the following components:
apache_mod_php
automount
Bom
Directory Services
iChat
IPSec
LaunchServices
LibSystem
loginwindow
Mail
rsync
Safari
Syndication