Just for completeness (the affected versions and https://security-tracker.debian.org/tracker/CVE-2013-6456 indicate this already): squeeze and wheezy are not affected. Cheers, -- Guido