Hi, The fix from the security tracker,
12d903a5c916 "atom: move pending line breaks to the heap" (src/lib/fy-atom.c only) is on master and in v1.0.0-beta1/beta2; no 0.9.x release has it. It applies to the sources on https://www.google.com/url?q=http://sources.debian.org&source=gmail&ust=1793800253663000&sa=E as follows: unstable 0.9.4-1: offsets -64/-70, no fuzz trixie 0.8-1: offsets -71/-77, fuzz 1 on one hunk Mechanical patch-applies check only; not built or tested. Regards
