Thanks Paulo2,
That link does point to discussion of same issue. Its "resolution" (its a typo, ignore it) is not very satisfying - although the date differences certainly suggest a typo, its certainly not clear cut. There have been 4 updates to the ChangeLog.txt since that discussion (over a month ago) but the confusing release numbering is still there.
Anyway, I've since found out some more about the security issue involved (
https://cve.mitre.org/cgi-bin/cvenam...=CVE-2014-0038) and it seems the kernel config option X86_X32 is the problem. I see that the kernel configuration for the earlier release tag 3 kernel package has "CONFIG_X86_X32=y" whereas the later release tag 2 kernel has "# CONFIG_X86_X32 is not set". That confirms the "its a typo" resolution for me.
chris