1.0.8 is indeed affected. I don't have an Ubuntu system, but I'll attach a suggested diff for the Ubuntu changelog security update.
1.0.8 is indeed affected. I don't have an Ubuntu system, but I'll attach a suggested diff for the Ubuntu changelog security update.