package: passenger version: 2.2.5debian-2 severity: important tags: security
Hi, Your package embeds prototype.js, which makes security updates very cumbersome, difficult, and potentially error-prone. Please update your package to make use of the system prototype.js provided by the libjs-prototype binary package. This is a mass-filing, and the only checking done so far is a version comparison. If your package for some reason is not affected or already uses the system prototype.js, please close this bug with a message indicating that that is the case. Thank you very much for your attention on this matter. Mike _______________________________________________ Pkg-ruby-extras-maintainers mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/pkg-ruby-extras-maintainers
