Hi Håvard, On Fri, Nov 12, 2021 at 11:21:08PM +0000, Debian Bug Tracking System wrote: [...] > CVE-2021-40985 has now been marked as unimportant, I'm therefore > closing this bug, since the CVE was the sole purpose of the update. > > Regards, > Håvard
In case this was just caused by a uncertainity what is acceptable to fix via a point release and what not: I guess SRM will accept updates in stable as well for simpler bugfixes with low severity (even more if you had already prepared the debdiff as attached to this bug and as well #998902). Regards, Salvatore