package: otrs2
severity: important
version: 2.4.7-6

otrs2 embeds source code from yui.  this is poor practice from a
security perspective.  please use the system version of yui.  note that
doing so would also fix the RC issue #591196.

thanks,
mike



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to