Given that the yui dependency is in a plugin (uicolor), I propose the following: - re-upload ckeditor without this plugin - file a bug upstream about migration to yui3 (mentioning CVE)
Cheers -- Mathieu -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
