Already under way :) I have already prepared 7.32-1+deb8u5 including this fix, it's waiting for approval by the stable security team. I have also uploaded 7.39-1~bpo8+1 to jessie-backports.
As for SA-CORE-2015-002, it was fixed in 7.32-1+deb8u4, which is currently part of jessie-security (and 7.38-1~bpo8+1 in jessie-backports). The former will enter plain Jessie by the next point release, but if you are following security updates, you should already have got it. Thanks!
signature.asc
Description: Digital signature
