The immediate problem should be fixed with 4a021fb5d4963d4e0756fcc182223b05939062d6.
Unfortunately, I'm not sure that I can cut a security release before the weekend (it'll take some time and I'm still decobwebbing my dev box). Anyone who wants to cut a security NMU that cherry-picks the above SHA, please feel free to do so. Still to do: audit the hierarchy editor for other bugs (I wrote this ages ago when I was much stupider :) ) and sanity-check other users of get_homedir and other parts of the hierarchy code. (alternatively to the last, rip the hierarchy code out by its roots) Daniel -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org