See the blog post for more information.
What is the best means to express interest in a 1.26.3 release to address the same security issues? I can’t find a github issue for it, but decimals are hard to search for with github search.
It is unlikely that we would do such a thing without significant reason; Rust is designed to make it easy to jump to the next stable. However, filing an issue on rust-lang/rust is probably the best way.