Bug#925251: stretch-pu: package file/1:5.30-1+deb9u2
On Mon, 2020-02-10 at 08:55 +0100, Christoph Biedl wrote:
> Salvatore Bonaccorso wrote...
>
> > Is this still something it is worth to pursue and adress those two
> > CVEs pending for stretch or is the regression risk to high?
>
> In my opinion it is worth to pursue it - so let me rebase upon the
> latest releas in Debian 9 ("stretch") and upload to (old)s-p-u soon,
> just after another round of regression tests. Then there's a lot of
> time to let things mature.
That doesn't seem to have happened yet, and we're a little over a week
from closing stretch before it moves to LTS.
It's up to you if you want to go ahead still, but there won't be time
for it to mature.
Regards,
Adam
Reply to: