Hello Georg, thanks a lot for your help. The packaging repo is: https://salsa.debian.org/mzf/zipios
the branch for this buster patch is "fix_CVE-2019-13453_for_buster": https://salsa.debian.org/mzf/zipios/-/tree/fix_CVE-2019-13453_for_buster the last commit is: https://salsa.debian.org/mzf/zipios/-/commit/7bdc65a62cacea47e03c13e6d92157da3c11f6bd I can upload the package to mentors.d.n if needed. Just let me know. Best, François
