Salvatore Bonaccorso wrote... > Is this still something it is worth to pursue and adress those two > CVEs pending for stretch or is the regression risk to high?
In my opinion it is worth to pursue it - so let me rebase upon the latest releas in Debian 9 ("stretch") and upload to (old)s-p-u soon, just after another round of regression tests. Then there's a lot of time to let things mature. Adam (for the stable release team), can I just go ahead, or would you like to see an updated patch first? From the neverending story departement, Christoph
signature.asc
Description: PGP signature