It's not. It's not in oldstable, but it is in everything after.

https://lists.debian.org/debian-security-announce/2014/msg00...