[Al Stone] > For somewhat nostalgic reasons on my part, I'm looking at this package > and thinking about adopting it. It looks like the package has not > been touched in some time, but upstream still seems to be active > (commits within the last day, for example).
I was recently in contact with one of the upstream developers, and he suggested uploading the release candidates to Debian. Perhaps worth a try, to get a fix for the CVEs into the package archive? -- Happy hacking Petter Reinholdtsen