diff -u b/core/modules/update/update.report.inc b/core/modules/update/update.report.inc
--- b/core/modules/update/update.report.inc
+++ b/core/modules/update/update.report.inc
@@ -127,6 +127,14 @@
   $versions_inner = array();
   $security_class = array();
   $version_class = array();
+  $security_icon = array(
+    '#theme' => 'image',
+    '#width' => 18,
+    '#height' => 18,
+    '#uri' => 'core/modules/update/images/shield-icon.svg',
+    '#alt' => t('shield'),
+    '#title' => t('shield'),
+  );
   if (isset($project['recommended'])) {
     if ($project['status'] != UPDATE_CURRENT || $project['existing_version'] !== $project['recommended']) {
 
@@ -140,9 +148,6 @@
       ) {
         $security_class[] = 'project-update__version--recommended';
         $security_class[] = 'project-update__version---strong';
-        if (isset($project['security updates'][0]['security']) && $project['security updates'][0]['security'] == 'covered') {
-          $security_class[] = 'project-update__version---covered';
-        }
       }
       else {
         $version_class[] = 'project-update__version--recommended';
@@ -159,13 +164,11 @@
         ) {
           $version_class[] = 'project-update__version--recommended-strong';
         }
-        if (isset($project['releases'][$project['recommended']]['security']) && $project['releases'][$project['recommended']]['security'] == 'covered') {
-          $version_class[] = 'project-update__version---covered';
-        }
         $versions_inner[] = array(
           '#theme' => 'update_version',
           '#version' => $project['releases'][$project['recommended']],
           '#title' => t('Recommended version:'),
+          '#security_icon' => $security_icon,
           '#attributes' => array('class' => $version_class),
         );
       }
@@ -178,6 +181,7 @@
             '#theme' => 'update_version',
             '#version' => $security_update,
             '#title' => t('Security update:'),
+            '#security_icon' => $security_icon,
             '#attributes' => array('class' => $security_class),
           );
         }
@@ -189,6 +193,7 @@
         '#theme' => 'update_version',
         '#version' => $project['releases'][$project['latest_version']],
         '#title' => t('Latest version:'),
+        '#security_icon' => $security_icon,
         '#attributes' => array('class' => array('version-latest')),
       );
     }
only in patch2:
unchanged:
--- /dev/null
+++ b/core/modules/update/images/shield-icon.svg
@@ -0,0 +1,88 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+   xmlns:dc="http://purl.org/dc/elements/1.1/"
+   xmlns:cc="http://creativecommons.org/ns#"
+   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+   xmlns:svg="http://www.w3.org/2000/svg"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   width="22.610355mm"
+   height="25.777401mm"
+   viewBox="0 0 80.115432 91.337247"
+   id="svg4167"
+   version="1.1"
+   inkscape:version="0.91 r13725"
+   sodipodi:docname="shield-icon.svg"
+   inkscape:export-filename="/Users/yoroy/Documents/Projects/DRU Drupal/DRU1601 D8UX post release/shield-icon"
+   inkscape:export-xdpi="26.959999"
+   inkscape:export-ydpi="26.959999">
+  <defs
+     id="defs4169" />
+  <sodipodi:namedview
+     id="base"
+     pagecolor="#ffffff"
+     bordercolor="#666666"
+     borderopacity="1.0"
+     inkscape:pageopacity="0.0"
+     inkscape:pageshadow="2"
+     inkscape:zoom="7.9195959"
+     inkscape:cx="-5.7305716"
+     inkscape:cy="28.904169"
+     inkscape:document-units="px"
+     inkscape:current-layer="layer1"
+     showgrid="false"
+     fit-margin-top="0"
+     fit-margin-left="0"
+     fit-margin-right="0"
+     fit-margin-bottom="0"
+     inkscape:window-width="2560"
+     inkscape:window-height="1395"
+     inkscape:window-x="0"
+     inkscape:window-y="1"
+     inkscape:window-maximized="1" />
+  <metadata
+     id="metadata4172">
+    <rdf:RDF>
+      <cc:Work
+         rdf:about="">
+        <dc:format>image/svg+xml</dc:format>
+        <dc:type
+           rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+        <dc:title></dc:title>
+      </cc:Work>
+    </rdf:RDF>
+  </metadata>
+  <g
+     inkscape:label="Layer 1"
+     inkscape:groupmode="layer"
+     id="layer1"
+     transform="translate(-214.228,-109.55072)">
+    <path
+       inkscape:export-ydpi="15.43"
+       inkscape:export-xdpi="15.43"
+       style="fill:#5fbcd3;fill-rule:evenodd;stroke:none;stroke-width:9;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
+       d="m 254.10253,118.10759 -36.31164,10.53931 0,30.97814 c 0,14.98689 30.61298,38.99562 35.51197,38.96067 l 2.0915,0 c 5.00951,0.0349 33.51197,-23.97378 33.51197,-38.96067 l 0,-30.97814"
+       id="path4200"
+       inkscape:connector-curvature="0"
+       sodipodi:nodetypes="ccsccsc" />
+    <path
+       sodipodi:nodetypes="ccsccscc"
+       inkscape:connector-curvature="0"
+       id="path4206"
+       d="m 255.57537,113.87618 -36.84737,10.57279 0,30.97814 c 0,14.98689 30.61298,40.99562 35.51197,40.96067 l 0.0915,0 c 5.00951,0.0349 35.51196,-25.97378 35.51196,-40.96067 l 0,-30.97814 c -12.25476,-3.52427 -24.50952,-7.04851 -36.76428,-10.57279"
+       style="fill:none;fill-rule:evenodd;stroke:#216778;stroke-width:9;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
+       inkscape:export-xdpi="15.43"
+       inkscape:export-ydpi="15.43" />
+    <path
+       sodipodi:nodetypes="ccsc"
+       inkscape:connector-curvature="0"
+       id="path4208"
+       d="m 254.31915,124.32275 c 0.0555,6.47375 0.48916,56.0873 0.0253,58.99823 -3.6484,0.0254 -25.37271,-17.84642 -25.37271,-28.7613 l 0,-22.56121"
+       style="fill:#ffffff;fill-rule:evenodd;stroke:none;stroke-width:9;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
+       inkscape:export-xdpi="15.43"
+       inkscape:export-ydpi="15.43" />
+  </g>
+</svg>
only in patch2:
unchanged:
--- a/core/modules/update/update.module
+++ b/core/modules/update/update.module
@@ -200,7 +200,7 @@ function update_theme() {
     // We are using template instead of '#type' => 'table' here to keep markup
     // out of preprocess and allow for easier changes to markup.
     'update_version' => array(
-      'variables' => array('version' => NULL, 'title' => NULL, 'attributes' => array()),
+      'variables' => array('version' => NULL, 'title' => NULL, 'security_icon' => NULL, 'attributes' => array()),
       'file' => 'update.report.inc',
     ),
   );
only in patch2:
unchanged:
--- a/core/themes/stable/templates/admin/update-version.html.twig
+++ b/core/themes/stable/templates/admin/update-version.html.twig
@@ -6,6 +6,7 @@
  * Available variables:
  * - attributes: HTML attributes suitable for a container element.
  * - title: The title of the project.
+ * - security_icon: The security coverage icon.
  * - version:  A list of data about the latest released version, containing:
  *   - version: The version number.
  *   - date: The date of the release.
@@ -19,6 +20,11 @@
     <div class="project-update__version-details layout-column layout-column--quarter">
       <a href="{{ version.release_link }}">{{ version.version }}</a>
       <span class="project-update__version-date">({{ version.date|date('Y-M-d') }})</span>
+      {% if version.security == 'covered' %}
+        <span class="project-update__coverage-icon">
+          <a href="https://www.drupal.org/security-advisory-policy">{{ security_icon }}</a>
+        </span>
+      {% endif %}
     </div>
     <div class="layout-column layout-column--half">
       <ul class="project-update__version-links">