This would have been prevented

https://www.debian.org/security/2019/dsa-4371