After some more research, affected are packages built using dehelper in the versions 13.17 and 13.18. There are more criteria so identifying affected packages is not trivial. I'll spend a few brain cycles on this and ask the release team for a rebuild.
Christoph
signature.asc
Description: PGP signature
