Hi Simon, > Unless the security team have reasons to want this to be treated as > urgent, I would suggest that instead of rushing to apply Ubuntu's > solution, we should see what happens upstream, and then follow that in > Debian when the dust has settled.
Agreed, this isn't an issue we need to rush a fix for.
Cheers,
Moritz
