that latter message was supposed to go to https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1149224 obviously, but regardless it might be worth considering that these aren't really unrelated - if the version needs to be bumped up at least in unstable, it might be wise to bump it up to something that covers these new high status vulnerabilities
-- ------------------------------------------------------------------------------------------------ End the campaign to Cancel Richard Stallman - go to stallmansupport.org ! ------------------------------------------------------------------------------------------------
