On Sun, 30 Jun 2019 12:04:20 +0200 Trek <trek00@inbox.ru> wrote: > I think you should consider it for buster+1 at least, as the actual > fix for the CVE is incomplete and not all the regressions has been > fixed (920466 924311 924640) but at least they all have patches > included today a new bug appeared 932598 and reminded me this patch I post here only to have an updated list of affected packages ciao!