See advisory here:
Debian has already issued new packages and an advisory:
This bug also affects "cadaver":
I'll open another bug for this.
Steps to Reproduce:
This one is for pauldv too :)
Waiting for a bump to 0.24.6.
I just committed 0.24.6 to testing. I'll mark it stable tomorrow if nothing turns up
0.24.6 has been made stable on major arches, so this is ready for a GLSA draft too.
s390 : please mark stable to benefit from the future GLSA.
Stable on s390