The Debian Security Tracker still lists haskell-tls as affected by
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169, can
you please check with upstream whether that is addressed, I couldn't
find a reference in the changelog.

Cheers,
        Moritz

Hi Moritz,

tricky, as not even upstream can give a definite answer:
https://github.com/vincenthz/hs-tls/issues/117

So I guess you can consider this to be not addressed. What are the
implications of that?

Greetings,
Joachim