I think you're both not understanding each other. As I understand it, Michael is saying that the patch for the security issue is not applied to the package in Debian and that upstream has fixed that for the next release.
As I understand Francesco, there is no need to apply the patch because it's using the full path of the module and so will never look into the current directory for the module. Kurt -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
