Hi, On Thu, Jan 7, 2021 at 12:12 PM Salvatore Bonaccorso <car...@debian.org> wrote: > > CVE-2020-36177[0]:
This vulnerability will be fixed in the next couple of days via upload of version 4.6.0 to unstable. A backport of the fix is not possible (freeze notwithstanding). Also, the patches from #978676 do not apply, or apply only partially, because we are changing the way the sources are repackaged. Kind regards Felix Lechner