The bug was fixed in upstream release 3.7.2. 3.7.3 is now out with more CVE fixes, please update to that following http://bugs.debian.org/719052
-- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org