From ${URL} : trip.rc, which is sort of a test suite, creates temporary files in a insecure way. @maintainer(s): since the package has never been marked as stable, we don't need to stabilize it. After the bump, please remove the affected versions from the tree.
Fixed in 1.7.1 upstream per the URL.