The stretch 9.10 point release (followed by a quick 9.11) brings a number of bugfixes (including some security fixes):
https://lists.debian.org/debian-announce/2019/msg00006.html
https://lists.debian.org/debian-announce/2019/msg00007.html
Use this ticket to track the respective updates across the cluster. I've verified that all removed packages are not in use in our infrastructure.
[] base-files
[] cups
[x] debian-archive-keyring
[] fribidi
[] gettext
[] glib2.0
[] grub2
[] gsoap
[] icu
[] libcaca
[] libgd2
[] libxslt
[] linux
[] linux-latest
[] mariadb-10.1
[] openldap
[] openssh
[] reportbug
[] systemd
[x] tzdata
[] unzip
[] usbutils
[] zsh
These are unused by us:
[x] basez
[x] biomaj-watcher
[x] bogl
[x] c-icap-modules
[x] chaosreader
[x] clamav
[x] corekeeper
[x] dansguardian
[x] dar
[x] fence-agents
[x] fig2dev
[x] fusiondirectory
[x] gocode
[x] groonga
[x] gthumb
[x] havp
[x] koji
[x] lemonldap-ng
[x] libclamunrar
[x] libconvert-units-perl
[x] libdatetime-timezone-perl
[x] libebml
[x] libevent-rpc-perl
[x] libgovirt
[x] librecad
[x] libsdl2-image
[x] libthrift-java
[x] libtk-img
[x] libu2f-host
[x] liquidsoap
[x] llvm-toolchain-7
[x] minissdpd
[x] miniupnpd
[x] mitmproxy
[x] monkeysphere
[x] nasm-mozilla
[x] ncbi-tools6
[x] node-growl
[x] node-ws
[x] open-vm-tools
[x] passwordsafe
[x] pound
[x] prelink
[x] python-clamav
[x] resiprocate
[x] sash
[x] sdl-image1.2
[x] signing-party
[x] slurm-llnl
[x] sox
[x] t-digest
[x] tenshi
[x] xymon
[x] yubico-piv-tool
[x] z3
[x] zfs-auto-snapshot
These are only used by the installer, which has been rebuilt:
[x] debian-installer
[x] debian-installer-netboot-images