[ncmncm]

I don't find bug reports for this in either Debian or Ubuntu bug tracking systems. When do these get entered?

[ximm]

https://security-tracker.debian.org/tracker/CVE-2021-3156

[throw0101a]

Also, if you run a large Debian farm, it may be worth subscribing to debian-security-announce:

* https://lists.debian.org/debian-security-announce/

The message for this issue went out 18:05 UTC:

* https://lists.debian.org/debian-security-announce/2021/msg00...

See also the RSS feed for:

* https://www.debian.org/security/

[bboozzoo]

There's a corresponding Ubuntu security notice: https://ubuntu.com/security/notices/USN-4705-1