Hi, Let me share a bit more information,
First let me confirm about: [x] the issue is verified as fixed in unstable Latest upstream version is v2.0.21 and released in unstable and testing Regarding content of debdiff, don't be scared by certs removal, they are obsolete and can't be used for testing. So have improved build flow to re-generate them on the fly. That change was forwarded upstream, no negative feedback since: https://github.com/eclipse-mosquitto/mosquitto/pull/3234 Finally, for the context some attempts to make a debian revision were started along the security team, but it stalled because CI check were not passing (which are fixed since) and upstream was not responsive to review it, time passed up and sec-team proposed me to target a point release as explained at: https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#special-case-uploads-to-the-stable-and-oldstable-distributions Beside waiting for review, is there anything I can do ?