Your message dated Sun, 10 Jul 2016 14:08:54 +0200 with message-id <[email protected]> and subject line typo3-src has been removed from Debian has caused the Debian Bug report #602260, regarding typo3-src-4.3: assorted embedded code copies to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 602260: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602260 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: typo3-src-4.3 Version: 4.3.8-1 Severity: normal Tags: security typo3 has quite a few embedded code copies in contrib/. Some of these are probably unavoidable, but extjs is packaged separately, and IMO swfobject should be too. typo3/contrib/flashmedia/swfobject Not packaged, http://code.google.com/p/swfobject/, RFP #601160 Not really source code (it's been compressed with yui-compressor), and no source code here for expressInstall.swf (#591969), but source code exists. typo3/contrib/extjs/ libjs-extjs 3.0.0 Appears to contain source code plus a compressed version typo3/contrib/flashmedia/flvplayer.swf Origin unknown, no source code, see #591969 typo3/contrib/flashmedia/player.swf GPL'd with no source code present, see #591969 typo3/contrib/json Services_JSON, not packaged typo3/contrib/jsmin A PHP port of jsmin, sadly non-free (#602250) typo3/contrib/flashmedia/qtobject Non-free by omission, but probably intended to be free software: "There are no usage restrictions on this file, feel free to distribute this code and associated files". I'll include this in #602250. typo3/contrib/RemoveXSS Upstream website has disappeared, but at least it's Free (PD). I can't help feeling that this is not how you avoid cross-site scripting, though. Code copies which have correctly been replaced by a symlink to packaged versions include prototype and scriptaculous. Regards, S
--- End Message ---
--- Begin Message ---Version: 4.5.40+dfsg1-1+rm the obsolete and unsupported typo3 versions have been removed from Debian long ago, closing the remaining bug reports now. Andreas
--- End Message ---

