Control: tags -1 + confirmed On Thu, 2017-11-16 at 08:46 +0100, Dylan Aïssi wrote: > Upstream has fixed 2 CVE (CVE-2017-2816 and CVE-2017-14731), these 2 > CVE are non-dsa. I already backported patches to unstable/testing and > now I would like to fix the Stretch and Jessie versions. Please find > attached a debdiff for Stretch. Please go ahead. Regards, Adam