Control: tags -1 + moreinfo On Mon, 2016-07-04 at 18:22 +0200, Simon Kainz wrote: > Paul Wise found out that duck rund untrusted code from the current directory as > well as the ./lib and ./lib/checks directory. The attached patch fixes this > issue. +duck (0.7+deb8u1) jessie-security; urgency=high That contradicts this request to fix the issue via proposed-updates; which is the case? Regards, Adam