I guess this bug can be closed, can't it? If the version that Debian has reverted to after the backdoor was disclosed or any of the supposedly cleaned versions would have still had any malicious code in it, it would anyway be useless by now, to revert to an even older version.
Cheers, Chris
