@carnil: issue can be considered as fixed in 2.0.2-7+deb10u1 since the vulnerable feature is broken, only stretch is affected