I forgot to add a link to the bugreport about the vulnerability: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104963 Cheers! -- Sergei Golovan