On Sun, Nov 1, 2026 at 3:11 PM Sumit Verma <[email protected]> wrote: > No rush from my side. I'm not aware of any public exploit or of these > being exploited in the wild; I only prepared the backport because the > fixes were sitting unreleased on master. Waiting for 2.10 and packaging > the full release makes more sense than cherry-picking, so please go > ahead that way and disregard the debdiff. Backports are fine for Bookworm, you might want to help with that. As noted, expat 2.10 was around the corner and is just released, upload is pending.
Regards, Laszlo/GCS
