[Pkg-javascript-devel] Bug#555257: jscropperui: embeds prototype.js

Michael Gilbert michael.s.gilbert at gmail.com
Mon Nov 9 00:51:46 UTC 2009


package: jscropperui
version: 1.2.0-2
severity: important
tags: security

Hi,

Your package embeds prototype.js, which makes security updates very
cumbersome, difficult, and potentially error-prone. Please update your
package to make use of the system prototype.js provided by the
libjs-prototype binary package.

This is a mass-filing, and the only checking done so far is a version
comparison.  If your package for some reason is not affected or already
uses the system prototype.js, please close this bug with a message
indicating that that is the case.

Thank you very much for your attention on this matter.

Mike





More information about the Pkg-javascript-devel mailing list