Re: Well, it depends on the issue and the patch, doesn't it?
-----BEGIN CORRECTION-----
It *is* the certificates that need to be revoked, but it's the corresponding private keys that present a problem if they've been stolen, because the certificates are already public.
-----END CORRECTION-----