FWIW I don't think you should rely solely on backports for this; if a bug was introduced in -security then it should be fixed through the same channel.
FWIW I don't think you should rely solely on backports for this; if a bug was introduced in -security then it should be fixed through the same channel.