Bug#925251: stretch-pu: package file/1:5.30-1+deb9u2

[Salvatore Bonaccorso <carnil@debian.org>]

Hi,

On Tue, Aug 20, 2019 at 11:26:33PM +0100, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Thu, 2019-07-18 at 05:07 +0200, Christoph Biedl wrote:
> > Adam D. Barratt wrote...
> > 
> > > Assuming I count correctly, your mail was from approximately 6
> > > weeks
> > > before the date of the upcoming 9.9 point release.
> > 
> > This story has a tendency to fall off radar repeatedly. Perhaps we
> > can
> > eventually find a solution for this in the next days?
> 
> I guess we should just get on with it.
> 
> FWIW, we're currently about 2.5 weeks from the next point release. I
> realise that {c,sh}ould have been longer.

Is this still something it is worth to pursue and adress those two
CVEs pending for stretch or is the regression risk to high?

Regards,
Salvatore