Hi, FWIW, I'm actually preparing a security update for the two CVEs and for bookworm I was first planning to do a 590-2.1 reaching unstable, and so then 590-2.1~deb12u1 for bookworm.
But if you want to override it with a NMU and proposing to salvage the package this is equally fine. Regards, Salvatore
