Control: tags -1 + confirmed On Fri, 2019-10-18 at 13:23 +0200, Hugo Lefeuvre wrote: > as discussed in #939553[0], no DSA will be issued by the security > team for CVE-2018-21010 and this vulnerability can be fixed via -pu. > The attached debdiff addresses this issue, along with CVE-2018-20847. Please go ahead; thanks. Regards, Adam