Thanks for the reply Stefan That makes sense.
/Bjørn Håkon Den fre. 22. mar. 2019 kl. 21:20 skrev Stefan Fritsch <[email protected]>: > > On Monday, 18 March 2019 09:19:41 CET Bjørn Håkon Noss wrote: > > After looking at the Security tracker > > (https://security-tracker.debian.org/tracker/CVE-2018-17199), I can > > see that CVE-2018-17199 is fixed in both jessie and buster but not > > stretch. > > > > Do you have any information about if and when it will be fixed in stretch? > > > > The bug causes our PCI Compliance to fail. > > As this is low severity, we intend to fix this in the next Debian stable point > release (9.9). > > Cheers, > Stefan > > > >

