On Fri, 14 Jul 2017 10:36:38 +0100 "Adam D. Barratt" <adam@adam-barratt.org.uk> wrote: > > I did - the version in unstable certainly doesn't. It does contain code > that looks exactly the same as the vulnerable code in stable, so I > assume the bug also affects that version. > Ok, I cherry-picked the patch and will let you know when this lands in unstable. Currently working on it. Thanks