Debian Duck vulnerabilities

• debian duck duck before 0.10 did not properly handle loading of untrusted code from the current directory. CVE-2016-1239 Fix available 9.8 CriticalFebruary 19, 2022