CVE-2018-19969

the security-tracker says "vulnerable (no DSA, ignored)" for jessie but not for stretch.

can someone decide, if this should be backported or can be ignored on stretch and track that?

BTW: what's the difference between "no DSA" and "no DSA, ignored"?

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information