Salvatore Bonaccorso wrote:
> The current issues which were fixed in DLA-1077-1 are all no-dsa, so
> thei did not warrant a DSA via security.d.o. Can you fix those issues
> via upcoming point releases?
yes, probably. But I guess that's not Mikulas' point:
Both wheezy and jessie had package version 2.7-8. While wheezy got a fixed
package with 2.7-8+deb7u1, jessie didn't. The fix should be as straight as
uploading the same (source) package to jessie that got uploaded to wheezy.
CC:ing Markus Koschany <a...@debian.org> who did the upload to wheezy.