It hasn't actually been removed from Debian yet, but the request is filed, and yet another CVE was released yesterday.
It hasn't actually been removed from Debian yet, but the request is filed, and yet another CVE was released yesterday.