package release.debian.org tags 966247 = buster pending thanks Hi, The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian buster. Thanks for your contribution! Upload details ============== Package: commons-configuration2 Version: 2.2-1+deb10u1 Explanation: prevent object creation when loading YAML files [CVE-2020-1953]