I was contacted by someone at SUSE that is working on fixing the security bugs - but even if successful, I don't know how good the quality will be or how much testing will be able to get done before stretch is released. Removal might be safest option
