package release.debian.org tags 946184 = buster pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian buster. Thanks for your contribution! Upload details ============== Package: fig2dev Version: 3.2.7a-5+deb10u2 Explanation: allow Fig v2 text strings ending with multiple ^A [CVE-2019-19555]