Package: release.debian.org Severity: normal User: release.debian....@packages.debian.org Usertags: pu
I prepared an update for openvrml that disable JavaScript support as the package fails to build with newer versions of libmozjs-dev. As it might be used to view downloaded files, I think it should not use libmozjs185-dev which has broken sandboxing (as far as I understand). Note that this bug (#710616) is not fixed in unstable yet, but included in the suggested patch for #710082. Ansgar
diff -u openvrml-0.18.9/debian/changelog openvrml-0.18.9/debian/changelog --- openvrml-0.18.9/debian/changelog +++ openvrml-0.18.9/debian/changelog @@ -1,3 +1,10 @@ +openvrml (0.18.9-5+deb7u1) wheezy; urgency=low + + * Disable JavaScript support as newer versions of Mozilla's JS engine are + not supported by openvrml. (Closes: #710616) + + -- Ansgar Burchardt <ans...@debian.org> Sat, 17 Aug 2013 10:23:05 +0200 + openvrml (0.18.9-5) unstable; urgency=low * Move example directory in libopenvrml9 to libopenvrml-doc. diff -u openvrml-0.18.9/debian/control openvrml-0.18.9/debian/control --- openvrml-0.18.9/debian/control +++ openvrml-0.18.9/debian/control @@ -7,7 +7,7 @@ libgl1-mesa-dev | libgl-dev, zlib1g-dev, libjpeg-dev, libpng12-dev, libx11-dev, libxext-dev, libfreetype6-dev, libfontconfig1-dev, libsdl1.2-dev, - default-jdk, libmozjs-dev(>= 8.0), libboost-dev, libboost-test-dev, + default-jdk, libboost-dev, libboost-test-dev, libboost-thread-dev, libboost-filesystem-dev, libgtk2.0-dev, libxmu-dev, procps, graphviz, libgnomeui-dev, libglade2-dev, libcurl4-gnutls-dev, xulrunner-dev, libgtkglext1-dev, libltdl-dev, diff -u openvrml-0.18.9/debian/rules openvrml-0.18.9/debian/rules --- openvrml-0.18.9/debian/rules +++ openvrml-0.18.9/debian/rules @@ -22,7 +22,8 @@ --mandir=\$${prefix}/share/man \ --infodir=\$${prefix}/share/info \ --libdir=\$${prefix}/lib/$(DEB_HOST_MULTIARCH)/ \ - --libexecdir=\$${prefix}/lib/$(DEB_HOST_MULTIARCH)/openvrml + --libexecdir=\$${prefix}/lib/$(DEB_HOST_MULTIARCH)/openvrml \ + --disable-script-node-javascript ifeq ($(DEB_BUILD_GNU_TYPE), $(DEB_HOST_GNU_TYPE)) confflags += --build $(DEB_HOST_GNU_TYPE)