Comment 18 for bug 1464064

Hi, could you please set this to high priority? This is a serious security flaw.

Yes, the packages are signed. However, signing keys can be stolen. In today's world, multiple layers of security are mandatory.

This bug has ALREADY left a critical flaw gaping open, https://www.debian.org/security/2016/dsa-3733, and continues to be unresolved.