Debian-LTS has issued an advisory on March 25: https://www.debian.org/lts/security/2021/dla-2608 The issues are fixed upstream in 3.5.0.
Status comment: (none) => Fixed upstream in 3.5.0
Note that even for M7, the SRPM is cited .mga6 Assigning globally.
Assignee: bugsquad => pkg-bugs
https://blog.mageia.org/en/2021/06/08/mageia-7-will-reach-end-of-support-on-30th-of-june-the-king-is-dead-long-live-the-king/
Status: NEW => RESOLVEDResolution: (none) => OLD