I asked on IRC about this so feel free to send the email, Phil or Donncha: jbicha | carnil: are you going to sponsor #860268 as a security update? jmm_ | jbicha: yeah, we can fix that via security.debian.org, please send a mail to team at security.debian.org, only a few of us are on IRC Thanks, Jeremy Bicha