Control: tags -1 + confirmed On Sun, 2017-11-19 at 21:21 -0800, James Lu wrote: > I've prepared an update for Variety to fix some shell injection bugs > caused by crafted filenames. These fixes are backported from the > 0.6.6 release which is currently in unstable. Assuming that the resulting package has been built and tested in a stretch environment, please go ahead. Regards, Adam