Your message dated Fri, 13 Nov 2009 00:33:20 +0100
with message-id <20091112233320.ga11...@belanna.comodo.priv.at>
and subject line Re: Bug#555271: jifty: embeds prototype.js
has caused the Debian Bug report #555271,
regarding jifty: embeds prototype.js
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
555271: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555271
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
package: jifty
version: 0.90519-1
severity: important
tags: security
Hi,
Your package embeds prototype.js, which makes security updates very
cumbersome, difficult, and potentially error-prone. Please update your
package to make use of the system prototype.js provided by the
libjs-prototype binary package.
This is a mass-filing, and the only checking done so far is a version
comparison. If your package for some reason is not affected or already
uses the system prototype.js, please close this bug with a message
indicating that that is the case.
Thank you very much for your attention on this matter.
Mike
--- End Message ---
--- Begin Message ---
On Sun, 08 Nov 2009 20:03:38 -0500, Michael Gilbert wrote:
> Your package embeds prototype.js, which makes security updates very
> cumbersome, difficult, and potentially error-prone. Please update your
> package to make use of the system prototype.js provided by the
> libjs-prototype binary package.
>
> This is a mass-filing, and the only checking done so far is a version
> comparison. If your package for some reason is not affected or already
> uses the system prototype.js, please close this bug with a message
> indicating that that is the case.
jifty doesn't install prototype.js in the binary package but depends
on and links to the shipped file:
debc:
Depends: ... libjs-prototype ...
lrwxrwxrwx root/root 0 2009-11-13 00:28
./usr/share/perl5/auto/share/dist/Jifty/plugins/Jifty/Plugin/Prototypism/web/static/js/prototypism/prototype.js
-> ../../../../../../../../../../../../../javascript/prototype/prototype.js
$ cat debian/libjifty-perl.links
...
/usr/share/javascript/prototype/prototype.js
usr/share/perl5/auto/share/dist/Jifty/plugins/Jifty/Plugin/Prototypism/web/static/js/prototypism/prototype.js
Cheers,
gregor
--
.''`. http://info.comodo.priv.at/ -- GPG Key IDs: 0x00F3CFE4, 0x8649AA06
: :' : Debian GNU/Linux user, admin, & developer - http://www.debian.org/
`. `' Member of VIBE!AT, SPI Inc., fellow of FSFE | http://got.to/quote/
`- NP: Little Walter: Last Night
signature.asc
Description: Digital signature
--- End Message ---
