[From nobody Sat Mar 28 15:07:06 2026
Received: (at submit) by bugs.debian.org; 26 Feb 2026 20:31:30 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-14.9 required=4.0 tests=ARC_SIGNED,ARC_VALID,
 BAYES_00,BODY_INCLUDES_PACKAGE,FOURLA,HAS_PACKAGE,RCVD_IN_DNSWL_NONE,
 RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 68; hammy, 150; neutral, 461; spammy,
 0. spammytokens: hammytokens:0.000-+--HTo:N*Debian,
 0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking, 0.000-+--HTo:N*Bug,
 0.000-+--HTo:N*System
Return-path: <sam.edwards@bc.libraries.coop>
Received: from mail-canadacentralazon11021089.outbound.protection.outlook.com
 ([40.107.192.89]:4450 helo=YT5PR01CU002.outbound.protection.outlook.com)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP384R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <sam.edwards@bc.libraries.coop>)
 id 1vvi1B-006tI3-1L for submit@bugs.debian.org;
 Thu, 26 Feb 2026 20:31:30 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
 b=wQD5rUEVMp+3+i7ooKcoj2MquW7e+2wv9ojJDbniRbgRvZa3expvQBnDOdr3ErMHEKbYRTHQi2swrqy0etizWF5Ja2P3TdBgd4cBoVLlUlcOexg7hFYunxrb+3OS0ToMUvqvEt9FCGbuX5breg5rGhcJsvNLJa5g32wE1Znv3ZzZbqjEu7WGxFmEVj+voJW1BRuuSviJ2QLWalxOvZAPWJrG09FzPMyNffFHGA9Enct/wKi6QJjWSewCFWe7+o3Wf979tfmijbT/5PWEM4OXkfb4mWaWDvYdVgQLs++m4YoHjzFZPso42UCRaertxaSyefc+HFBLoSVV2NKagyQl7g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; 
 s=arcselector10001;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=M+EN8MjFS6ngZZ4eBpLXnMGsBuRgfQYN5KRAlCxZCRI=;
 b=i1ss1NH/OQfzpf/Py8xLe2rDNe+UCYqLAQHZprou65SPf6MCho6PMe8LvhdMPQ8US1MAtIuSwhVsxBIeYGFrb2pSDm6KDuSsrBI7FPX8U7qbLHEz5OXjx+phpaivKydqHV6U5aNZgyB9jT8GErt3BrwcCmfGnrFua85ti0s4n03XromvuPh1MvLGNXVwctxSqAlLHUar2Rv94deivTki64JTL5AiAv75jczVHltEyCTVi9RmnWt02gTSF3UCbEk4AbAyqHI9jhyAcaNN+uU/jehsAFsDIOHgK0Ekn7SGZ23HpCT/xlxPHIMIZ3uJ2zBZvTATheRr+0AKH1u3NCeVpA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
 smtp.mailfrom=bc.libraries.coop; dmarc=pass action=none
 header.from=bc.libraries.coop; dkim=pass header.d=bc.libraries.coop; arc=none
Received: from YT4P288MB0311.CANP288.PROD.OUTLOOK.COM (2603:10b6:b01:102::14)
 by YT5P288MB0781.CANP288.PROD.OUTLOOK.COM (2603:10b6:b01:132::17)
 with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.14; Thu, 26 Feb
 2026 20:31:23 +0000
Received: from YT4P288MB0311.CANP288.PROD.OUTLOOK.COM
 ([fe80::be2b:65b:eb20:8c11]) by YT4P288MB0311.CANP288.PROD.OUTLOOK.COM
 ([fe80::be2b:65b:eb20:8c11%5]) with mapi id 15.20.9632.017; Thu, 26 Feb 2026
 20:31:23 +0000
From: Sam Edwards <sam.edwards@bc.libraries.coop>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: request-tracker5: Bundled ckeditor4 is built without correct version
 string
Thread-Topic: request-tracker5: Bundled ckeditor4 is built without correct
 version string
Thread-Index: AQHcp17ehx+OzAWF+kGj0G2eZCrq7g==
Date: Thu, 26 Feb 2026 20:31:22 +0000
Message-ID: <89ABF335-132C-4DAB-80D2-E2E7BEF3ED14@bc.libraries.coop>
Accept-Language: en-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=bc.libraries.coop;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: YT4P288MB0311:EE_|YT5P288MB0781:EE_
x-ms-office365-filtering-correlation-id: 06f81fd1-2ca7-4f4e-6052-08de757601ef
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
 ARA:13230040|366016|376014|10070799003|1800799024|7142099003|38070700021; 
x-microsoft-antispam-message-info: OtYF1L4Jn5OmVs+umLsalKrOqXQXu33STICwySBF7F/PITbRKsh4xI3xUhX9cTmx5HR6C0KFb7kh3YN5kzsOrsUGi6/aLXUHDJy+DZ3JMPu7vfXjyx1Q3qdS+QPTMqNEJKz4CTHMfJzufUqRtl5dfT4pTgZNd6cecSbdBaQ3ydeRKmKO3oyql0kPHxQe22wiaQmvYqPha0fZXb4jvU8B8I+kJj2uLCjPboM5EW01GfcsUP6r1WO/7UnEWtoVAKP2H85Kw6i877O8EU6LVaiDQKOxmdytIRcesoZR4CCloHzSe3rpsAo8PlwCv2CVhoBPkNmqOR979NiP58C2bJplXmYYFW3i1aHNNOMyo2F/6f9HaO1t5uNIl1IqdYgTn/Rub3v7vmiVkM+mv/qgXgQlh6b1vr3SlWM7KAZBJyXJqWpEDa4GVkHfX4wnPWDQ4D3HbBeznmO0GuFihxXz6sjXF6Mwp83TW4lA0gEOZz9+FTZ8jxY2kXrksqaygDFM1qr2RJs92MkcSiasCz5wdjbFNsrCueDa7m49Uh+jERPYrzwTkRp9WQj+SxIjtwD+8YXc3EhQklhHWTv7WwRvQoXtSJ66tHy9Hio9flwH4cG5BxlF/zag7EcLQzzREH2pWanWWPjtrJG+mNGos82nSKDKjlJMsDIl64MgD0FACPlYkhliA7vNBvHlcynOAQ2Anf3/zp8wja5Fs0leD1Tx5gT28vNSQpVB8IRGyYOmuOglKNDYPwLTCTOuepW8Tz+ttVRO
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;
 IPV:NLI; SFV:NSPM; H:YT4P288MB0311.CANP288.PROD.OUTLOOK.COM; PTR:; CAT:NONE;
 SFS:(13230040)(366016)(376014)(10070799003)(1800799024)(7142099003)(38070700021);
 DIR:OUT; SFP:1102; 
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?0pkzh+XpSD55BYQYb6kU963lvJk6a2Zk17fA8Nb9beJcvW6QuSsDRlj5YU/b?=
 =?us-ascii?Q?Ld3jgTjdQmQJnQkYkjWywoUQDvdPM/qY2O2N6dNNoEP7rQONiTrtjb2/JnwD?=
 =?us-ascii?Q?eJAlTyQDkNbpuFATT/7OlnA45sE8j6o+NwUmgRe2V35l1YYT7uR1+Gd+FVZ9?=
 =?us-ascii?Q?qqD35ZczVrV9Ufbr5lCmV1mKmPC9XnaH4kgc3PH20quMjRTvHW7OCm3X1q0m?=
 =?us-ascii?Q?JzwwXn9GYLAw3FvcHOlOrEMDY578dUhERtEPx3l15FnCDGSYfWVkkaNztRuB?=
 =?us-ascii?Q?W7GYjsDMY07toRvp1l9y+VEG8qTOf1cfwUDINjp5pusFxSfAMG5w4/jCa0+j?=
 =?us-ascii?Q?mzKWPYP8lgg9TYo1mU0g9Fq8DR0Z6xY5PzzElU8XJrC5/OEa5vM6YJKHpmJf?=
 =?us-ascii?Q?SYXUq6av7xJXOOFfFMFZ1aUk7ni7V1f77kEwNM9G4fo7ldTCmXmDp1sDF2PH?=
 =?us-ascii?Q?gPO77Sj2e1Yf1W/5kToyrPM3QXu9HJ5BLKvuPqGFa3CIAXgctVm0e/ZJLD/R?=
 =?us-ascii?Q?Un/im32far6EDSVX86tdtDG+xnfnTKb1lL1Aivm+VIDyxa0wBieTZ36YOIZ5?=
 =?us-ascii?Q?pvVlQd1VVaaJZT3Kyl0f/VPpxpHUd4pJnHzLujluYEZcnPhdyPSnqtaXieRS?=
 =?us-ascii?Q?EUnV+xP3hhAXyMFtLDDNI5j6eFYxhQkG2GHQmdBElEz4QIF6crnWLgbRgdVc?=
 =?us-ascii?Q?/7lqDwtfMiyjmZ7CoQY8u9CktNXcRAisP/hhzytlMDLwXTKNZvzmSuHIItPL?=
 =?us-ascii?Q?WOOJpiJbp3SG5jEdtuuiAWrPSwkmGaHroS5jWtOFNl2GpbKXlXofg9jzJGFO?=
 =?us-ascii?Q?L3BviD1j275VVTz7OSSKIGxhVXM7jWOyJ7Z67ZPXQF7ePGjB1QfzG1DhiMXb?=
 =?us-ascii?Q?w8XnJbQD7W3H7byfjkyL23W5EXm23B6HbQpX3KA4SMvIStWKOLR7LC1vV+16?=
 =?us-ascii?Q?OxhYgW0Wav734phNSVdUW7XDcFSRbLxtvAYtjM5e4LK5FzHSW5/FeGdfA2wE?=
 =?us-ascii?Q?ASUtTy/6UxfwvazY9szKpowldXomQ3T/wYZec1Zoq/pOqKP0np+jMuVRJyWt?=
 =?us-ascii?Q?qYlsQbEXpSNO0ASzl/XOxxcrZVjTSd29DZ/p0TK8U3yUzNmEYj3CzxFlmsK0?=
 =?us-ascii?Q?fcTDkHiwwHrhdseEvMW070UDj7oRkY2rBYFECLkPKortc43wD+RAI69Q7X69?=
 =?us-ascii?Q?7RjC2JQjCMtegnlVgsSmpBr1QFzjEDbJnv4DHV9PGzat0+HipficgZs1lrAH?=
 =?us-ascii?Q?LU9mY/MshVgLAP2QzY/2rWDqh2wjPMgF7V3cb0JUuu1sNIaITRMvxWml4nTL?=
 =?us-ascii?Q?PoMVYZUUmhEPFmlV/CcpU0e34diEEoUFQSqn8uM+3L0m+E9VcOwtrWKHsEoZ?=
 =?us-ascii?Q?6IblLTqCOAmesBpagjbtYlTl4ivjxWG2jG1JqgytjA08kbc2SEG4hVk+s/9t?=
 =?us-ascii?Q?QZm7kR7EtrrxsZwiUVKn+n1H3CJ+PKXpy/O5iCtQmjx0/GKTk/fXSGO/dQdm?=
 =?us-ascii?Q?jl+cPmbn89RcYfEwd6gINUSHexqpq/jFGrmPRkmDCcw9pjSLA22mud0inSSf?=
 =?us-ascii?Q?2NsQtK4/kVoVuxKmZFhtyYja3qY476VfgM4PX5KjzRWf5g2LOWaaiEBCgeOK?=
 =?us-ascii?Q?ArjnWndbeyPEad/s4DXS9Y4xlvvx/D3YTFfhlYlfYlBQv+OPB6hUVhEvhXu6?=
 =?us-ascii?Q?vde4vVxAcBXS+6B4XQWujdoVxxW3eLkxHzlLcGVjJ2RD0UpUDQ/meJ0bFIPJ?=
 =?us-ascii?Q?QC8GMGCMQwOX690YIPVfLAtmujdk3zRl+v2O9eKcWL+ahpfVlMaVx2uK3c6F?=
x-ms-exchange-antispam-messagedata-1: O6lj7rzxFeMB1xwW8p6jAwhrk5inyLddFzPJvn77HcJcom/uORLMjN4o
Content-Type: text/plain; charset="us-ascii"
Content-ID: <4A13B81B0E79494BA11C758581EDA5CC@CANP288.PROD.OUTLOOK.COM>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: bc.libraries.coop
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: YT4P288MB0311.CANP288.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 06f81fd1-2ca7-4f4e-6052-08de757601ef
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Feb 2026 20:31:22.3819 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 52d86b18-793a-48c9-a963-3875fbf2f041
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: zm2J75t6K3rMjjshd6KTGpOcVU8t78x1sY3vkml4oyf7mzqM7l4YLCDOa4R/IEKULHQrP8HMgjqx+aZ0r9Q/YcHUkmpQO3QgFbJsZEfCoWI=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: YT5P288MB0781
Delivered-To: submit@bugs.debian.org

Package: request-tracker5
Version: 5.0.7+dfsg-4+deb13u1
Severity: normal

Dear Maintainer,

Recently Firefox 148 has changed some of their iframe load event handling, =
which broke loading of ckeditor4 in some cases.

This bug was reported (https://bugzilla.mozilla.org/show_bug.cgi?id=3D20024=
81) and a hack was created to fix the behaviour, and is targetted to ckedit=
or4 only using the "verson" property of its CKEDITOR global.

Unfortunately in the request-tracker5 package, when ckeditor is built (http=
s://salsa.debian.org/request-tracker-team/request-tracker5/-/blob/master/de=
bian/scripts/build-final-ckeditor.sh?ref_type=3Dheads), neither the build c=
onfig file or the command line flags contain a version or revision like the=
 upstream build script does (https://github.com/ckeditor/ckeditor4/blob/mas=
ter/dev/builder/build.sh#L93).

This results in the defaults of version "DEV" and revision "0" being baked =
in to the minified file, and thus the Firefox not detecting the ckeditor in=
 RT as needing the hack, and therefore it fails to load correctly.


-- Package-specific info:
Changed files:
/usr/sbin/rt-clean-shorteners-5
/var/cache/request-tracker5/mason_data
/var/cache/request-tracker5/mason_data/cache
/var/cache/request-tracker5/mason_data/etc
/var/cache/request-tracker5/mason_data/obj
/var/cache/request-tracker5/session_data
/var/lib/request-tracker5/data
/var/lib/request-tracker5/data/RT-Shredder
/var/lib/request-tracker5/data/gpg

There are locally modified files in /usr/local/share/request-tracker5/,
these may (or may not) be the source of the problem.


-- System Information:
Debian Release: 13.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stabl=
e')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.57+deb13-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=3Den_US.UTF-8, LC_CTYPE=3Den_US.UTF-8 (charmap=3DUTF-8) (ignor=
ed: LC_ALL set to en_US.UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages request-tracker5 depends on:
ii dbconfig-common 2.0.25
ii debconf [debconf-2.0] 1.5.91
ii fonts-droid-fallback 1:8.1.0r7-1~1.gbp36536b
ii fonts-noto-core 20201225-2
ii init-system-helpers 1.69~deb13u1
ii libapache-session-perl 1.94-2
ii libbusiness-hours-perl 0.13-2
ii libcgi-emulate-psgi-perl 0.23-2
ii libcgi-pm-perl 4.68-1
ii libcgi-psgi-perl 0.15-3
ii libclass-accessor-perl 0.51-2
ii libclone-perl 0.47-1+b1
ii libconvert-color-perl 0.18-1
ii libcpanel-json-xs-perl 4.39-2~deb13u1
ii libcrypt-eksblowfish-perl 0.009-3+b4
ii libcrypt-x509-perl 0.55-1
ii libcss-minifier-xs-perl 0.13-1+b5
ii libcss-squish-perl 0.10-1
ii libdata-guid-perl 0.051-1
ii libdata-ical-perl 0.24+dfsg-2
ii libdata-page-perl 2.03-1
ii libdate-extract-perl 0.07-1
ii libdate-manip-perl 6.98-1
ii libdatetime-format-natural-perl 1.21-1
ii libdatetime-locale-perl 1:1.41-1
ii libdatetime-perl 2:1.65-1+b2
ii libdbi-perl 1.647-1
ii libdbix-searchbuilder-perl 1.82-1
ii libdevel-globaldestruction-perl 0.14-4
ii libemail-address-list-perl 0.06-2
ii libemail-address-perl 1.913-1
ii libencode-detect-perl 1.01-6+b4
ii libencode-hanextra-perl 0.23-6+b5
ii libfile-sharedir-perl 1.118-3
ii libfile-which-perl 1.27-2
ii libgd-graph-perl 1.56~ds-1
ii libgd-text-perl 0.86-11
ii libgnupg-interface-perl 1.04-6
ii libgraphviz2-perl 2.67-2
ii libhtml-formatexternal-perl 26-6
ii libhtml-formattext-withlinks-andtables-perl 0.07-2
ii libhtml-formattext-withlinks-perl 0.15-3
ii libhtml-gumbo-perl 0.18-5
ii libhtml-mason-perl 1:1.60-2
ii libhtml-mason-psgihandler-perl 0.53-2
ii libhtml-quoted-perl 0.05-1
ii libhtml-rewriteattributes-perl 0.06-1
ii libhtml-scrubber-perl 0.19-2
ii libhttp-message-perl 7.00-2
ii libipc-run-perl 20231003.0-2
ii libipc-run3-perl 0.049-1
ii libjavascript-minifier-xs-perl 0.15-1+b5
ii libjson-perl 4.10000-1
ii liblist-moreutils-perl 0.430-2
ii liblocale-maketext-fuzzy-perl 0.11-3
ii liblocale-maketext-lexicon-perl 1.00-3
ii liblog-dispatch-perl 2.71-1
ii libmailtools-perl 2.22-1
ii libmime-tools-perl 5.515-1
ii libmime-types-perl 2.28-1
ii libmodule-path-perl 0.19-3
ii libmodule-refresh-perl 0.18-2
ii libmodule-runtime-perl 0.018-1
ii libmodule-versions-report-perl 1.06-4
ii libmoose-perl 2.2207-1+b3
ii libmoosex-nonmoose-perl 0.27-1
ii libmoosex-role-parameterized-perl 1.11-2
ii libnet-cidr-perl 0.25-1
ii libnet-ip-perl 1.26-4
ii libnet-ldap-perl 1:0.6800+dfsg-1
ii libnet-ssleay-perl 1.94-3
ii libparallel-forkmanager-perl 2.03-1
ii libpath-dispatcher-perl 1.08-2
ii libperlio-eol-perl 0.19-1+b3
ii libplack-perl 1.0051-1
ii libpod-parser-perl 1.67-1
ii libregexp-common-net-cidr-perl 0.03-2
ii libregexp-common-perl 2024080801-1
ii libregexp-ipv6-perl 0.03-3
ii librole-basic-perl 0.16-1
ii libscope-upper-perl 0.34-1+b3
ii libstring-shellquote-perl 1.04-3
ii libsymbol-global-name-perl 0.05-4
ii libtext-autoformat-perl 1.750000-2
ii libtext-password-pronounceable-perl 0.30-3
ii libtext-quoted-perl 2.10-2
ii libtext-template-perl 1.61-1
ii libtext-wikiformat-perl 0.81-1
ii libtext-worddiff-perl 0.09-2
ii libtext-wrapper-perl 1.05-4
ii libtime-parsedate-perl 2015.103-5
ii libtimedate-perl 2.3300-2
ii libtree-simple-perl 1.34-2
ii liburi-perl 5.30-1
ii libweb-machine-perl 0.17-4
ii libwww-perl 6.78-1
ii libxml-rss-perl 1.65-1
ii libxml-simple-perl 2.25-2
ii nullmailer [mail-transport-agent] 1:2.2+10~g7ed88a0-6.1
ii perl [libencode-perl] 5.40.1-6
ii perl-doc 5.40.1-6
ii rt5-apache2 5.0.7+dfsg-4+deb13u1
ii rt5-clients 5.0.7+dfsg-4+deb13u1
ii rt5-db-postgresql 5.0.7+dfsg-4+deb13u1
ii ucf 3.0052

Versions of packages request-tracker5 recommends:
ii cron [cron-daemon] 3.0pl1-197
ii libcss-inliner-perl 4024-1
ii libfile-dropbox-perl 0.7-2
ii libnet-amazon-s3-perl 0.991-1
ii w3m 0.5.3+git20230121-2.1

Versions of packages request-tracker5 suggests:
ii rt5-doc-html 5.0.7+dfsg-4+deb13u1

-- debconf information excluded

-- debsums errors found:
debsums: changed file /usr/sbin/rt-clean-shorteners-5 (from request-tracker=
5 package)=
]