Track another round of update for stretch-pu for linux

Note we do not update the 4.9.107-1 entries. For kernel sec we will mark
as released the version tagged for each of the CVEs and this is
technically as well a version seen entering the archive when releasing
the point release. So it is fine to just att the [stretch] - linux
4.9.107-1 entries respectively to the earlier CVEs.