Talked to upstream about stable security support. To make Debian stable distribution support possible, upstream offered to backport security patches from newer versions to whatever version is frozen in Debian stable should that be required.
Mariusz Zaborski osho...@vexillium.org would do that. Kind regards, Patrick