Debian packages are still vulnerable.
I've committed the fix to the svn debian repository but it will take some time to be uploaded into the main repository.
Cheers, Héctor
