Hi Jörg, I had a quick look at the patches and resulting code base. Without looking a lot, it all looks like easy to understand supplementary checks, and I didn't see anything that would break the code without also breaking building. I may be wrong but it feels kind of safe to upload.
Also, we're not seeing any 1.8.19 release coming from upstream, and I don't think it's reasonable, at this point, to wait further. As time is passing and we aren't seeing any reply from you, and as this is an RC bug, with a CVE involved, I'm uploading the debdiff I attached in my previous reply to the DELAYED/5 queue. If you feel it's not a good idea, you therefore have 5 days to let me know, and I'll either cancel my upload, or sponsor the upload of any better version you may produce. Also, it'd be nice to work on a fix for Buster. Did you do any work for it? If you don't have the intention to do it, please let everyone know, so we can deal with the release team to prepare an update for the next point release. Cheers, Thomas Goirand (zigo)
