Package: calibre Version: 0.9.0+dfsg-1 Severity: normal The calibre package contains an embedded copy of libjs-mathjax in /usr/share/calibre/viewer/mathjax/. Please investigate whether it is feasible to replace this copy with a dependency on libjs-mathjax. Please use at least version 2.1+20121028-1 of libjs-mathjax (experimental), because the mathjax package was split into smaller packages to reduce installation size. As such this bug cannot be fixed for wheezy (and as far as I can see the embedded copy is not part of wheezy). If it is infeasible to replace this copy, please report[1] the copy to the security team. This might be the case if calibre contains a heavily modified version.
Helmut [1] http://wiki.debian.org/EmbeddedCodeCopies -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org