Control: fixed 929976 1.8.4-1 The bug was fixed upstream [1] and included in the 1.8.4 release, so it's solved in debian since iptables 1.8.4-1
Thanks for reporting! Alberto [1] https://git.netfilter.org/iptables/commit/iptables/xtables-eb.c?id=e1ccd979e6849748578fad76475c688bdd16df0d
