On Wed, Sep 10, 2014 at 6:27 PM, Bastien ROUCARIES
<roucaries.bast...@gmail.com> wrote:
> control: tag -1 + pending
> control: tag  -1 + fixed-upstream.
>
> BTW wheezie is affected too (not squeeze), code is identical than in
> 4.4. Could you update the security tracker.

Sorry stable version is one sub minor version before the problem so not affected

> Upstream fixed 3.6 here
> http://dev.ckeditor.com/browser/CKEditor/trunk/_source/plugins/preview/preview.html?rev=7706
>
> On Wed, Sep 10, 2014 at 6:18 PM, Bastien ROUCARIES
> <roucaries.bast...@gmail.com> wrote:
>> A new version is under mentors at:
>> http://mentors.debian.net/debian/pool/main/c/ckeditor/ckeditor_4.4.4+dfsg1-1.dsc
>>
>> Stable is problematic. I could not made a patch:
>> - ckeditor under stable is only min.js (not sourced: S)
>> - I may with a lot of work create a sourcefull version from svn but it
>> will be massive surgery.
>> - I may delete the problematic plugin but package will be still
>> sourceless and it will loose some functionnality.
>>
>> Bastien


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to