Sometimes companies release minor updates that are reflected for fresh downloads but don't have the auto-update mechanisms in existing clients to download the update --- usually to save on bandwidth costs.
However, for a security patch that seems 'unfortunate'.
http://blogs.skype.com/security/2011/05/security_vulnerabili...
I submitted here as well:
http://news.ycombinator.com/item?id=2522808