Just curious why that patch has the icons for "Purchased subscription
required" and "Security Alert".

Aren't those two things supposed to be mutually exclusive? If it's a
security patch, you don't have to have maintenance?