It's a bit scary and would need a lot of testing, but the very poor state of aptitude on multiarch systems in affected releases is a sufficient reason to try for an SRU; so, Dmitrijs or other sponsors, go ahead and upload.
(However, I would suggest removing the "Lack of upstream support" section from "Impact"; true or not, this has no direct bearing on whether we update packages in stable releases.)
It's a bit scary and would need a lot of testing, but the very poor state of aptitude on multiarch systems in affected releases is a sufficient reason to try for an SRU; so, Dmitrijs or other sponsors, go ahead and upload.
(However, I would suggest removing the "Lack of upstream support" section from "Impact"; true or not, this has no direct bearing on whether we update packages in stable releases.)