Package: ed Severity: important Tags: security Hi Martin, please see http://seclists.org/oss-sec/2017/q1/70 for more information and a patch. A CVE ID is not yet available. For stable, this doesn't warrant a DSA, but we could fix it through a point release. Cheers, Moritz