Hi, I filed 952964 because I failed to find this one first, apparently. I merged it now, please ignore 952964.
The problem is that upstream commits around this issue are quite a bit of a mess, with a number of trial and error fixup commits. So, a half broken version of the fix was now included in the Jessie security update. See... https://github.com/oetiker/rrdtool-1.x/commits/master?after=caf8f7e4a06cd36a69142a46326e58296850781d+69&path%5B%5D=src&path%5B%5D=rrd_graph.c ...and then the 'a proper fix to...' and a bunch of newer commits, like 'fix character class definition' and more. So, a bit more inspection of the history of that file is necessary to collect the pieces for a proper fix together. I can help testing a new package if you want. Thanks, Hans van Kranenburg
