Hi Ben, Thanks for the IRC ping.
On Tue, Aug 29, 2017 at 08:23:27AM -0500, Benjamin Kaduk wrote: > I am inclined to just put it in unstable and not backport, but > created the bug to see if the security team felt otherwise. > > If you look at the pull request history for the upstream commit, > it seems that it was languishing there for a while before getting > merged, as well. yes that looks fine. The issue could still be fixed via a point release and recieve more testing before the point release beeing in the poposed-update queue. I will mark it for now as no-dsa in the security-tracker itself. Regards, Salvatore
