Since all security releases are based on last released codebase + security patch, I think its safe to say WordPress security releases don't have database upgrades, but I figured I will ask my fellow developers here.
Does anyone know of a security release which had one? Or can anyone think of a case where it might have a database upgrade code within it?