So, since this bug has been reopened without comments, here's what appears to be the status:
currently stretch has 1.36-3+deb9u2 and sid has 1.36-5. According to the changelog, stretch get a patch in -3+deb9u1 which was reverted in -3+deb9u2. sid got that patch in -5, no revert. -- Peter Palfrader +43 662 8044 6326 FB Computerwissenschaften Universität Salzburg Jakob-Haringer-Straße 2 5020 Salzburg, Austria

