Fix CVE-2019-18397

Salvatore Bonaccorsorequested to merge
carnil/CVE-2019-18397 into master

This was already fixed via buster-security in DSA 4561-1.

Merge request reports