Given that the yui dependency is in a plugin (uicolor), I propose the following:
- re-upload ckeditor without this plugin
- file a bug upstream about migration to yui3 (mentioning CVE)

Cheers

-- 
Mathieu


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to