* Daniel Shahaf: > I'm not Eli, but I believe he's referring to CVE-2015-8025 (#802914), > which was fixed in 5.30-1+deb8u1 that was uploaded to jessie-security on > 2015-10-25. > > I don't know how long the fix had been publicly available for before it > was uploaded to jessie-security.
Since there is no public VCS, all we can go by is the date stamp from xscreensaver-5.34/utils/version.h: 24-Oct-2015. Cheers, -Hilko
