> I see that Debian packages have been patched to correct the two CVE > (1.4.12.1+dfsg-4). Why bother with 1.4.12, there is 1.4.14? Harald.