[DRE-maint] Bug#555224: libjson-ruby: embeds prototype.js

Michael Gilbert michael.s.gilbert at gmail.com
Mon Nov 9 00:23:32 UTC 2009


package: libjson-ruby
version: 1.1.9-1
severity: important
tags: security

Hi,

Your package embeds prototype.js, which makes security updates very
cumbersome, difficult, and potentially error-prone. Please update your
package to make use of the system prototype.js provided by the
libjs-prototype binary package.

This is a mass-filing, and the only checking done so far is a version
comparison.  If your package for some reason is not affected or already
uses the system prototype.js, please close this bug with a message
indicating that that is the case.

Thank you very much for your attention on this matter.

Mike






More information about the Pkg-ruby-extras-maintainers mailing list