Ah yes correct. The security updates since the farmOS 1.7 release are low-risk, so we haven’t tagged a new full release of farmOS. But, if you want the updates before we do, you can update to the latest “7.x-1.x-dev snapshot” available here: https://www.drupal.org/project/farm/releases/7.x-1.x-dev - It’s the same process a updating to a tagged release.
FWIW in farmOS 2.x we will be using semantic versioning (eg: 2.x.y instead of 7.x-1.x), and will have a more streamlined process for frequent “patch” releases for things like this.
FYI if the Drupal warning messages are annoying, you can also disable them by turning off the core “Update” module. There are also some settings for it at /admin/reports/updates/settings. They should only show to the “admin” user, however, and not to lower-level users (like the “Farm Manager” or “Farm Worker” roles).