The bug affects version 4.0 and 4.2.0 - 4.2.12 but not 4.1 or 3.x. This means that the versions in squeeze-backports, wheezy-backports, testing and unstable are vulnerable.
-- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org