[Pkg-phototools-devel] Bug#969159: darktable: embeds photoswipe

[David Bremner]

Package: darktable
Version: 3.2.1-2+b1
Severity: important
Tags: security
X-Debbugs-Cc: pkg-javascript-devel at lists.alioth.debian.org, Debian Security Team <team at security.debian.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Darktable embeds the photoswipe JavaScript library (https://github.com/dimsemenov/PhotoSwipe)
and uses it in exported web galleries). It seems to be an old version
:(. 

- -- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.7.0-2-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages darktable depends on:
ii  libc6                    2.31-3
ii  libcairo2                1.16.0-4
ii  libcolord-gtk1           0.1.26-2
ii  libcolord2               1.4.4-2
ii  libcups2                 2.3.3-2
ii  libcurl3-gnutls          7.68.0-1+b1
ii  libexiv2-27              0.27.3-3
ii  libgcc-s1                10.2.0-5
ii  libgdk-pixbuf2.0-0       2.40.0+dfsg-5
ii  libglib2.0-0             2.64.4-1
ii  libgomp1                 10.2.0-5
ii  libgphoto2-6             2.5.25-3
ii  libgphoto2-port12        2.5.25-3
ii  libgraphicsmagick-q16-3  1.4+really1.3.35+hg16297-1
ii  libgtk-3-0               3.24.22-1
ii  libilmbase25             2.5.3-2
ii  libjpeg62-turbo          1:2.0.5-1.1
ii  libjs-prototype          1.7.1-3
ii  libjs-scriptaculous      1.9.0-2
ii  libjson-glib-1.0-0       1.4.4-2
ii  liblcms2-2               2.9-4+b1
ii  liblensfun1              0.3.2-5
ii  liblua5.3-0              5.3.3-1.1+b1
ii  libopenexr25             2.5.3-2
ii  libopenjp2-7             2.3.1-1
ii  libosmgpsmap-1.0-1       1.1.0-7
ii  libpango-1.0-0           1.46.0-2
ii  libpangocairo-1.0-0      1.46.0-2
ii  libpng16-16              1.6.37-2
ii  libpugixml1v5            1.10-1
ii  librsvg2-2               2.48.7-1
ii  libsecret-1-0            0.20.3-1
ii  libsoup2.4-1             2.70.0-1
ii  libsqlite3-0             3.33.0-1
ii  libstdc++6               10.2.0-5
ii  libtiff5                 4.1.0+git191117-2
ii  libwebp6                 0.6.1-2+b1
ii  libx11-6                 2:1.6.10-3
ii  libxml2                  2.9.10+dfsg-5+b1
ii  libxrandr2               2:1.5.1-1
ii  zlib1g                   1:1.2.11.dfsg-2

darktable recommends no packages.

darktable suggests no packages.

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
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=2wVa
-----END PGP SIGNATURE-----