That is exactly what it says. They knew about security issues in their library and didn't fix them for years. This isn't being ignorant, this is negligence.