package: otrs2 severity: important version: 2.4.7-6 otrs2 embeds source code from yui. this is poor practice from a security perspective. please use the system version of yui. note that doing so would also fix the RC issue #591196.
thanks, mike -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org