On Tue, 29 Sep 2026 at 14:15:40 +0000, Björn Wiggert (wiggert.it) wrote: > Given that the affected Debian 12 and Debian 13 packages are currently > exposed to known issues, would there be any chance to get the fix > published out of the normal CVE timing, i.e. before CVE IDs are > assigned?
Yes, see my original message higher up in the thread. https://bugs.debian.org/1146838#44 -- Guilhem.

