/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 13418 - (hide annotations) (download)
Tue Dec 1 22:08:31 2009 UTC (3 years, 5 months ago) by jmm-guest
File size: 38305 byte(s)
- exaile patch was broken, update fixed version
- fix CVE ID in wireshark DSA
- update gforge code copies
- mark kdegraphics 4 as fixed, since okular links dynamically against poppler
- mysql-ocaml, fwbuilder fixed
- xerces buglet won't be fixed
- track fwbuilder by source package name
1 nion 7695 Embedded code copies
2     ====================
3    
4 thijs 8078 This file collects source packages that embed code from other projects.
5     This is considered bad for fixing security flaws because the fix needs
6     to be applied in multiple source packages.
7 jmm-guest 1586
8 nion 7695 Format:
9     <srcpkg> (<optional comment about srcpkg>)
10     - <embedding srcpkg> <status> (<sort>; bug #<number>)
11     NOTE: optional comments about the linkage of the embedding srcpkg
12    
13 thijs 8078 status: version number fixing the embedded copy, <unfixed>, <removed>,
14 gilbert-guest 12715 <itp>, <not-affected>, <unknown> if the version number can not
15     be determined, or <unfixable> for unavoidable cases (e.g., forks
16     that add real value)
17 nion 7828 sort: static (linking statically against a lib)
18     embed (embedding a copy of the library into another source package)
19 thijs 8078 fork (the package is not just embedding code but it is a fork and
20     thus might share parts of the source code)
21 fw 8142 old-version (the package is an older version of essentially
22     the same code)
23 nion 7828
24 thijs 8078 The srcpkg might be some string to identify the code if there is no
25     specific source package.
26 jmm-guest 1586
27 thijs 8078 Everything up to the next line is ignored.
28 stef-guest 7923 ---BEGIN
29 nion 7696 xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30 jmm-guest 7743 NOTE: Fixed packages link to poppler library unless otherwise noted
31 nion 7697 - pdftohtml <unknown>
32     [sarge] - pdftohtml <unfixed>
33     [etch] - pdftohtml <unfixed>
34     NOTE: has been replaced by poppler-utils
35 nion 11565 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36 nion 8760 - texlive-base 3.0-12 (embed)
37 jmm-guest 7743 - texlive-bin 2007-1 (embed)
38 nion 7696 NOTE: links to poppler
39 nion 7739 - koffice <unfixed> (embed; bug #436163)
40     - libextractor 0.5.12-1 (embed)
41 jmm-guest 7743 NOTE: libextractor is using its own pdf decoder now
42 nion 7739 - ipe <unfixed> (embed)
43 nion 7696 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 nion 7739 - ruby-gnome2 <unknown> (embed)
45 nion 7696 NOTE: copy only present in source but links to poppler
46 neilm 10853 - pdfedit <unfixed> (embed; bug #510794)
47 gilbert-guest 13037 - swftools <unfixed> (embed; bug #551293)
48     - poppler <unfixable> (fork)
49 nion 7696
50 nion 7791 ppmd
51 geissert 12518 - libcomplearn-mod-ppmd <unfixed> (fork)
52     NOTE: discussion in #458152
53 nion 7755
54 jmm-guest 12062 libevent
55 geissert 12518 - transmission 1.71-1 (embed; bug #529372)
56 jmm-guest 12062
57 jmm-guest 12156 lrmi
58     - read-edid 2.0.0-1 (embed; bug #495131)
59    
60 thijs 8189 peercast
61 jwilk-guest 13139 - gnome-peercast <removed> (embed)
62     [etch] - gnome-peercast <unfixed> (embed)
63 thijs 8189
64 nion 7791 silc-toolkit
65 nion 7740 - silc-client 1.1~beta6-1 (embed)
66 nion 6965
67 jmm-guest 11552 icclib
68 atomo64-guest 11862 - ghostscript <unfixed> (embed)
69     - argyll <unfixed> (embed)
70 jmm-guest 11552
71 nion 7791 dietlibc
72 nion 7740 - ccontrol 0.9.1+20071204-1 (static)
73 nion 6967
74 nion 11046 libmikmod
75     - sdl-mixer1.2 <unfixed> (embed)
76     TODO: report bug
77    
78 nion 7791 libiax
79 gilbert-guest 12969 - iaxmodem <unfixable> (embed; bug #548885)
80 nion 6969
81 gilbert-guest 12969 spandsp
82     - iaxmodem <unfixable> (embed; bug #548885)
83    
84 nion 7787 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85     - dpkg <unfixed> (embed)
86     NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87     - rsync <unfixed> (embed)
88     NOTE: somehow derived code base
89     - mono <unfixed> (embed)
90     TODO: check mozilla
91     - Linux kernels <unfixed> (embed)
92     - pvpgn 1.7.8-2 (embed)
93     - mrtg 2.12.2-1 (embed)
94     - rpm <unknown> (embed)
95 nion 7841 NOTE: pinged anibal since when rpm was fixed
96 atomo64-guest 11651 - tuxcmd-modules <unfixed> (embed)
97     - zsync <unfixed>
98     - tra <unfixed>
99     - sash <unfixed>
100     - nsis <unfixed>
101 atomo64-guest 11862 - mseide-msegui <unfixed>
102     NOTE: mseide
103 atomo64-guest 11651 - mirrordir <unfixed>
104     - poco <unfixed>
105     - klibc <unfixed>
106     - ghostscript <unfixed>
107     - freeimage <unfixed>
108     - clamav <unfixed> (fork)
109     NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110     - tuxonice-userui <unfixed>
111     - plt-scheme <unfixed>
112     - perl <unfixed>
113     - paraview <unfixed>
114     - gcvs <unfixed>
115     - dump <unfixed>
116     - aide <unfixed> (static)
117     - dar <unfixed> (static)
118 atomo64-guest 11862 - avfs <unfixed>
119 atomo64-guest 11651 - fpc <unfixed>
120     - winff <unfixed>
121     NOTE: inherited from fpc, see #472304
122     - lazarus <unfixed>
123     NOTE: inherited from fpc, see #472304
124 kees 12694 - erlang <unfixed> (embed)
125 kees 13120 - gamera 3.2.3-1 (embed)
126 gilbert-guest 13160 - python2.4 <unfixed> (embed; bug #553403)
127     - python2.5 <unfixed> (embed; bug #553403)
128 jmm-guest 1586
129 jmm-guest 12625 dulwich
130 kees 13120 - hg-git 0.1.0-1 (embed; bug #541996)
131 jmm-guest 12625
132     libvigraimpex
133 gilbert-guest 12733 - hugin <unfixed> (embed; bug #542259)
134     - enblend-enfuse <unfixed> (embed; bug #542258)
135 kees 13120 - gamera 3.2.3-1 (embed)
136 jmm-guest 12625
137 nion 7788 libbz2
138     - dpkg <unfixed> (static)
139 stef-guest 5320
140 gilbert-guest 12710 libgadu
141 nion 7788 - centericq <unfixed> (embed)
142 gilbert-guest 13222 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143     - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144 atomo64-guest 11862 - kdenetwork 4:3.3.2-5 (embed)
145     NOTE: from kdenetwork: kopete
146 nion 10291 - ekg 1:1.8~rc0-1 (embed)
147 jmm-guest 10313 - kadu 0.6.0.2-3 (embed; bug #504430)
148 gilbert-guest 12713 - gadu <itp> (embed)
149 jmm-guest 1586
150 nion 7791 xmlrpc (which package is the "origin" of this code?)
151 nion 7788 - drupal <unfixed> (embed)
152     - phpgroupware <unfixed> (embed)
153     - egroupware <unfixed> (embed)
154 atomo64-guest 11862 - phpwiki <unfixed> (embed)
155 nion 7788 - php4 <unfixed> (embed)
156     TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157 jmm-guest 1586
158 nion 7791 shtool (affects build-time only)
159     - mysql-ocaml <unfixed> (embed)
160     - php4 <unfixed> (embed)
161 jmm-guest 1588
162 gilbert-guest 12719 iceape
163     - iceweasel <unfixed> (fork)
164     - icedove <unfixed> (fork)
165     - xulrunner <unfixed> (fork)
166 jmm-guest 12113 - kompozer <unfixed> (embed; bug #532168)
167 gilbert-guest 13287 - galeon <unfixed> (fork)
168     - epiphany-browser <unfixed> (fork)
169     - conkeror <unfixed> (fork)
170     - kazehakase <unfixed> (fork)
171 jmm-guest 1588
172 nion 7791 xli
173     - xloadimage <unfixed> (embed)
174 jmm-guest 1588
175 nion 7827 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
176     - openmotif <unfixed> (embed)
177 atomo64-guest 11862 - libxpm <unfixed> (embed)
178 jmm-guest 1588
179 nion 7827 kerberized apps with BSD origin
180 gilbert-guest 12710 - krb4 <removed> (embed)
181 nion 7827 - krb5 <unfixed> (embed)
182     - heimdal <unfixed> (embed)
183 jmm-guest 1588
184 nion 7827 grip (which pkg is the origin?)
185 atomo64-guest 11862 - libcdaudio <unfixed>
186     - grip <unfixed>
187     - gnome-vfs <unfixed>
188 nion 7827 TODO: check vfs2 as well
189 stef-guest 1608
190 nion 7827 fudforum
191 atomo64-guest 11862 [etch] - phpgroupware <unfixed> (embed)
192     NOTE: phpgroupware-fudforum
193     [sarge] - egroupware-fudforum <removed> (embed)
194 jmm-guest 1670
195 jmm-guest 12452 libbsd
196 gilbert-guest 12710 - rdate 1:1.2-3 (embed)
197     - atheme-services <unfixed>
198     - libbsd-arc4random-perl <unfixed>
199     - isakmpd <unfixed>
200 jmm-guest 12452
201 nion 7827 cvs
202     - gcvs <unfixed> (embed)
203     NOTE: see cvsunix/src in tarball
204 jmm-guest 1684
205 gilbert-guest 13160 pcre3
206 nion 7827 - php4 <unknown> (embed)
207     - analog 2:5.23-0woody1 (embed)
208 atomo64-guest 11862 - goffice <unfixed> (embed)
209     NOTE: libgoffice-*
210 nion 7827 - vfu 4.06-4.1 (embed; bug #450754)
211     - tf5 5.0beta7-1 (embed)
212 jmm-guest 11590 - monotone 0.43-1 (embed)
213 nion 7827 NOTE: this only affects versions >= 0.37
214 nion 9241 - glib2.0 2.15.2-1 (embed)
215 nion 7827 - apache2 2.0.53-4 (embed)
216     - exim4 4.10-0.srh20.12 (embed)
217     - yacas <unfixed> (embed)
218     NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
219     - gtamsanalyzer.app 0.42-5 (embed)
220 jwilk-guest 13235 - tin 980117-1 (embed)
221 nion 8780 - kazehakase 0.5.2-1
222 gilbert-guest 12841 - webkit 1.0.1-1 (embed)
223 nion 8780 - qt4-x11 <unfixed> (embed)
224     NOTE: embedded via webkit copy
225 kees 12694 - erlang <unfixed> (embed)
226 jmm-guest 1758
227 nion 7827 tiff
228 nion 8587 - wxwindows2.4 2.2.1 (embed)
229 kees 13120 - gamera 3.2.3-1 (embed)
230 joeyh 1802
231 nion 7827 uudeview
232     - libconvert-uulib-perl <unfixed> (embed)
233 nion 9012 - pan <unfixed> (embed)
234 jmm-guest 1824
235 nion 7827 sqlite (not affected by security vulnerabilities so far)
236     - amarok <unfixed> (embed)
237 jmm-guest 11590 - monotone 0.43-1 (embed)
238 nion 7827 - iceweasel <unfixed> (embed)
239 jmm-guest 1828
240 nion 7827 util-linux/mount
241     - loop-aes-utils <unfixed> (embed)
242     NOTE: contains code from util-linux' mount in the mount-aes-udeb
243 jmm-guest 2104
244 nion 7827 sylpheed
245 nion 7828 - sylpheed-claws <unfixed> (fork)
246 jmm-guest 2751
247 nion 7827 phpsysinfo
248     - egroupware <unfixed> (embed)
249     - phpgroupware <unfixed> (embed)
250 jmm-guest 2800
251 nion 7830 phpldapadmin
252 stef-guest 7923 [sarge] - egroupware <unfixed> (embed)
253 nion 7830 NOTE: removed from egroupware after sarge
254 jmm-guest 2800
255 nion 7830 chmlib
256     - kchmviewer <unknown> (embed)
257 jmm-guest 2800
258 gilbert-guest 12668 ffmpeg (libavcodec/libavformat)
259 jmm-guest 9135 - mplayer 1.0~rc2-14 (embed; bug #395252)
260 jmm-guest 9251 - kino 1.0.0-1
261 jmm-guest 9135 - vlc <not-affected> (Links dynamically since initial release)
262 jmm-guest 9265 - smilutils 0.3.0-10
263 jmm-guest 9310 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
264     - motion 3.1.19-1
265     - gstreamer0.10-ffmpeg 0.10.3-2
266 gilbert-guest 12972 - xmovie <removed> (static)
267 nion 7841 TODO: gimp-gap (potentially using ffmpeg code as well)
268 jmm-guest 13190 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
269 jmm-guest 2948
270 nion 10758 faad2
271     - mplayer 1.0~rc2-20 (embed)
272 gilbert-guest 12525 - avifile <unfixed> (embed; bug #538750)
273 gilbert-guest 13273 - ffmpeg-debian <removed> (old-version)
274 nion 10758
275 gilbert-guest 12710 libmad (MPEG decoding lib)
276 nion 7830 - xine-lib <unfixed> (embed)
277 jmm-guest 13190 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
278 gilbert-guest 12710 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
279 jmm-guest 2948
280     libdts
281 nion 7840 - xine-lib <unfixed> (embed)
282 jmm-guest 2948
283     flac
284 nion 7840 - xine-lib <unfixed> (embed)
285 jmm-guest 2948
286 nion 7840 liba52
287     - a52dec <unfixed> (embed)
288     - xine-lib <unfixed> (embed)
289 jmm-guest 2948
290 nion 7840 libmpeg2
291     - mpeg2dec <unfixed> (embed)
292     - xine-lib <unfixed> (embed)
293 jmm-guest 2948
294 gilbert-guest 12969 libntlm
295     - wget <unfixed> (fork; bug #550436)
296     - curl <unfixed> (fork; bug #550437)
297     - cntlm <unfixed> (fork; bug #550438)
298 jmm-guest 3093
299 nion 7840 uw-imap
300     - pine <unfixed> (embed)
301     - alpine <unfixed> (embed)
302 jmm-guest 3320
303 nion 7840 imagemagick
304     - graphicsmagick <unfixed> (fork)
305 jmm-guest 3402
306 jmm-guest 12515 python-urlgrabber
307     - mercurial <unfixed> (embed; bug #531062)
308 jwilk-guest 13247 - w3af <unfixed> (embed; bug #555372)
309     [experimental] - harvestman <unfixed> (embed; bug #555373)
310 jmm-guest 12515
311 jwilk-guest 13130 beautifulsoup
312 jwilk-guest 13247 - python-mechanize <unfixed> (embed; bug #555349)
313     - zope2.11 <unfixed> (embed; bug #555350)
314 jwilk-guest 13249 - twill <unknown> (embed)
315 jmm-guest 12515
316 nion 7840 halibut
317 pabs 10854 - nsis <unfixed> (fork)
318 micah 3537
319 nion 7840 libghttp
320     - hotway <unfixed> (embed)
321 micah 3537
322 nion 7840 libsndfile
323 jmm-guest 10729 - ardour 1:2.7.1-1 (embed)
324 micah 3537
325 nion 7840 glibmm2.4
326 jmm-guest 10729 - ardour 1:2.7.1-1 (embed)
327 nion 6869
328 nion 7840 libgnomecanvasmm2.6
329 jmm-guest 10729 - ardour 1:2.7.1-1 (embed)
330 nion 6869
331 nion 7840 libsigc++-2.0
332 jmm-guest 10729 - ardour 1:2.7.1-1 (embed)
333 nion 6869
334 nion 7840 soundtouch
335 jmm-guest 10729 - ardour 1:2.7.1-1 (embed)
336 nion 6869
337 nion 7840 libmms
338     - xine-lib <unfixed> (embed)
339     - mimms <unfixed> (embed)
340 nion 6869
341 nion 7840 fckeditor
342 nion 8085 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
343 jmm-guest 11275 - moin 1.8.2-2 (embed; bug #452599)
344 jmm-guest 9410 - karrigell <removed> (embed; bug #452598)
345 nion 10319 - gforge 4.6.99+svn6225-1 (embed)
346 gilbert-guest 12386 - request-tracker3.8 <unfixed> (embed)
347 stef-guest 4517
348 nion 7841 ipatlas (not packaged in Debian)
349 white 10511 - moodle <unfixed> (embed; bug #507185)
350 jmm-guest 7383
351 nion 7841 libphp-phpmailer
352 white 10511 - moodle <unfixed> (embed; bug #507185)
353 atomo64-guest 10232 - mahara <unfixed> (embed)
354     - symfony <unfixed> (embed)
355 atomo64-guest 11862 [etch] - phpgroupware <unfixed> (embed)
356 white 10245 NOTE: phpgroupware-felamimail is only in etch
357     - egroupware <unfixed> (embed; bug #504283)
358 atomo64-guest 11124 - glpi <unfixed>
359 neilm 4838
360 nion 7841 htmlArea (not packaged in Debian)
361     - moodle <unfixed> (embed)
362    
363 jwilk-guest 13146 giflib
364 nion 8175 - wine <unfixed> (embed; bug #466181)
365    
366 sf 10837 bennu (not packaged in Debian, http://bennu.sourceforge.net)
367 nion 7841 - moodle <unfixed> (embed)
368    
369 jwilk-guest 13146 smarty
370 atomo64-guest 10324 - moodle 1.8.2-2 (embed; bug #471158)
371 nion 9324 - gallery2 2.2.5-2 (embed; bug #471160)
372 nion 8361 - mahara 0.9.2-2 (embed; bug #471201)
373 thijs 8347 - gosa 2.4beta1-1 (embed; bug #471200)
374 nion 7841
375 nion 7840 TinyMCE
376 nion 9382 - wordpress 2.5.1-3 (embed; bug #478257)
377 white 10511 - moodle <unfixed> (embed; bug #507185)
378 nion 7840 - knowledgeroot <unfixed> (embed)
379     - joomla <itp> (bug #326398)
380 stef-guest 4517
381 pabs 10874 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
382 nion 7840 - scite <unfixed> (embed)
383     - qscintilla <unfixed> (embed)
384     - qscintilla2 <unfixed> (embed)
385 pabs 10889 - geany <unfixed> (fork)
386 pabs 10874 - anjuta <unfixed> (embed)
387 stef-guest 4706
388 nion 7840 libphp-adodb
389 white 10511 - moodle <unfixed> (embed; bug #507185)
390 stef-guest 7923 NOTE: also AdoDB-XML Schema
391 nion 7840 - gallery2 <unfixed> (embed)
392     - phppgadmin <unfixed> (embed)
393     - egroupware <unfixed> (embed)
394     - phpwiki <unfixed> (embed)
395 nion 11923 - torrentflux 2.0beta1-2 (embed)
396 nion 7840 - ipplan <unfixed> (embed)
397 atomo64-guest 11862 - typo3-src <unfixed> (embed)
398 nion 7840 - cacti <unknown> (embed)
399     [sarge] - cacti <unfixed> (embed)
400     NOTE: dependency exists, but internal version is used
401 jmm-guest 10398 - gforge 4.7~rc2-6 (embed)
402 atomo64-guest 10232 - mahara <unfixed> (embed)
403 stef-guest 4706
404 nion 7840 gzip
405 nion 7841 - linux-kernel <unfixed> (embed)
406     NOTE: lib/inflate.c
407     - klibc <unfixed> (embed)
408     NOTE: based on linux-kernel gzip code
409     - busybox <unfixed> (embed)
410 micah 4767
411 nion 7841 neon
412 geissert 12518 - cadaver 0.22.3+debian-1 (embed; bug #188381)
413 nion 7841 - gnome-vfs2 <unfixed> (embed; bug #395874)
414 geissert 12518 [etch] - litmus <unfixed> (embed; #395875)
415     - litmus <removed> (embed; #395875)
416 nion 7841 [sarge] - screem <unfixed> (embed)
417 geissert 12518 - sitecopy 1:0.16.3-5 (embed; bug #395876)
418 stef-guest 7923 [etch] - tla <unfixed> (embed; bug #395877)
419     [sarge] - tla <unfixed> (embed; bug #395877)
420 stef-guest 5319
421 nion 7841 libmodplug
422     - gst-plugins-bad0.10 <unfixed> (embed)
423 stef-guest 5320
424 nion 7841 libvncserver
425     - vino <unfixed> (embed)
426 stef-guest 5320
427 nion 7841 putty
428     - filezilla <unfixed> (embed)
429 stef-guest 5320
430 nion 7841 tinyxml (not packaged in Debian)
431     - filezilla <unfixed>
432 stef-guest 5320
433 nion 7841 gv
434     - evince <unfixed> (embed)
435     NOTE: ps/ tree from gv 3.5.8
436 gilbert-guest 12710 NOTE: evince-gtk is affected (a component of evince source package)
437 stef-guest 5321
438 nion 7841 libXbae
439 gilbert-guest 12710 - paw <removed> (embed)
440 gilbert-guest 12713 [etch] - paw <unfixed> (embed)
441 stef-guest 5321
442 jmm-guest 12428 libgtkhtml
443 gilbert-guest 12710 - claws-mail-extra-plugins <unfixed> (fork)
444 jmm-guest 12428
445 nion 7841 libXaw
446 gilbert-guest 12710 - paw <removed> (embed)
447 gilbert-guest 12713 [etch] - paw <unfixed> (embed)
448 nion 7841 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
449 stef-guest 5321
450 nion 7841 libgd2
451     - graphviz <unfixed> (embed)
452     NOTE: lib/gd seems to be 2.0.33
453 nion 8098 - wml <unfixed> (embed)
454 nion 11790 - libwmf <unfixed> (embed)
455 nion 8098 NOTE: derived from gd 1.6.3
456 stef-guest 5321
457 nion 7841 rar
458     - unrar-nonfree <unfixed> (embed)
459 stef-guest 5440
460 nion 7841 unrar-free (maybe this code is derived from the original rar, too?)
461     - clamav <unfixed> (embed)
462     NOTE: seems to be disabled in default config
463 stef-guest 5440
464 nion 7841 mplayer (DirectMedia Object loader)
465     - xine-lib <unfixed> (embed)
466     NOTE: src/libw32dll/
467     - vlc <unfixed> (embed)
468     NOTE: modules/codec/dmo/
469 jmm-guest 10729 - mplayer 1.0~rc2-20 (embed)
470 stef-guest 5440
471 nion 7841 libwpd (WordPerfect converter)
472     - openoffice.org <unfixed> (embed)
473 alec-guest 5564
474 nion 7841 fsplib (http://sourceforge.net/projects/fsp/)
475     - gftp <unfixed> (embed)
476     NOTE: lib/fsplib version 0.3
477 keescook-guest 6298
478 jmm-guest 9251 sprng
479     - tree-puzzle <unfixed> (embed)
480    
481 nion 7841 librpcsecgss
482     - krb5 <unfixed> (embed)
483 keescook-guest 6498
484 nion 7841 jasper
485     - ghostscript <unfixed> (embed)
486     - gs-gpl <unfixed> (embed)
487 stef-guest 6985
488 sf 11080 libiris
489     - psi <unfixed> (embed)
490     - kdenetwork <unfixed> (embed)
491     NOTE: kopete embeds libiris but links dynamically to libidn
492     - kdegames <unfixed> (embed)
493     NOTE: ksirk/kde4
494    
495 nion 7841 libidn
496 jmm-guest 11590 - monotone 0.43-1 (embed)
497 sf 11080 - psi <unfixed> (embed)
498     NOTE: psi embeds libiris which embeds libidn
499     - kdegames <unfixed> (embed)
500     NOTE: kdegames/kde4 embeds libiris which embeds libidn
501 keescook-guest 7007
502 nion 7841 liblua
503 jmm-guest 11590 - monotone 0.43-1 (embed)
504 jwilk-guest 13142 - nmap 5.00-1 (embed; bug #527997)
505     [lenny] - nmap <unfixed> (embed; bug #527997)
506 jwilk-guest 13385 - ocropus <unfixed> (embed)
507 micah 7134
508 nion 7841 libbotan
509 atomo64-guest 11862 - monotone 0.43-1 (embed)
510 nion 7136
511 nion 7841 NetXX
512 jmm-guest 11590 - monotone 0.43-1 (embed)
513 nion 7136
514 nion 7841 libgc
515     - mono <unfixed> (embed)
516 nion 7136
517 nion 7841 lzma
518     - p7zip <unfixed> (embed)
519 kees 12584 - xz-utils <unfixed> (fork)
520 white 7203
521 nion 7841 lzo
522     - grub2 <unfixed> (embed)
523 jmm-guest 7212
524 nion 7927 yassl
525     - mysql-dfsg-5.0 <unfixed> (embed)
526    
527 nion 7841 pax code
528     - tar <unfixed> (embed)
529     - cpio <unfixed> (embed)
530 jmm-guest 7212
531 nion 7841 t1lib
532     - tetex-bin 2.0.2-1 (embed)
533     - texlive-bin <unknown> (embed)
534 thijs 7985
535     guichan
536     - boswars <unfixed> (embed)
537     NOTE: maintainer notified us, working on it
538    
539     tolua
540     - boswars <unfixed> (embed)
541     NOTE: maintainer notified us, working on it
542 jwilk-guest 13385 - ocropus <unfixed> (embed)
543 jwilk-guest 13391 - freeciv <unfixed> (embed)
544 thijs 7985
545     asio-dev
546 jwilk-guest 13139 - luxrender <removed> (embed)
547 thijs 7985
548 nion 7995 xine-lib
549     - vlc <unfixed> (embed)
550     NOTE: only parts included in modules/access/rtsp
551 stef-guest 8075
552     netpbm
553     - tcl8.3 <unfixed> (embed)
554     - tcl8.4 <unfixed> (embed)
555     - tcl8.5 <unfixed> (embed)
556     NOTE: generic/tkImgGIF.c
557 fw 8143
558     tk8.5
559     - tk8.0 <removed> (old-version)
560     - tk8.3 <unfixed> (old-version)
561     - tk8.4 <unfixed> (old-version)
562     - perl-tk <unfixable> (fork)
563 nion 8280
564 nion 8281 samba
565 white 10825 - mc 2:4.6.2~git20080311-1 (embed)
566 nion 8280 NOTE: maintainer is aware of this, currently searching a solution
567 micah 8337
568     plib1.8.4c2
569     - boson <unfixed> (fork)
570     NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
571 micah 8370
572     fribidi
573     - quesoglc <unfixed> (embed)
574 pabs 10876 NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
575 micah 8370
576     glew
577 pabs 10876 - quesoglc <unfixed> (embed; bug #489341)
578     NOTE: waiting on GLEW_MX version of glew (see bug #474488)
579 micah 8370
580 pabs 10875 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
581 micah 8370 - transcend <unfixed> (embed)
582     - cultivation <unfixed> (embed)
583 pabs 10873 - passage <unfixed> (embed)
584     - gravitation <unfixed> (embed)
585 jamie-guest 8413
586 jamie-guest 8728 tar
587     - libarchive <unfixed> (embed)
588 jamie-guest 8438 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
589 jamie-guest 8728
590     cpio
591     - libarchive <unfixed> (embed)
592 jamie-guest 8438 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
593 jamie-guest 8413
594 nion 8523 webkit
595     - qt4-x11 <unfixed> (embed)
596 white 8694
597     ftgl
598 thijs 8905 - blender 2.46+dfsg-1 (embed)
599 thijs 8700
600     wv
601     - abiword <unfixed>
602    
603 jamie-guest 8728 qemu
604 gilbert-guest 12666 - kvm <unfixed> (embed; bug #543159)
605 stef-guest 9862 - xen-3 <unfixed> (embed)
606     - xen-unstable <unfixed> (embed)
607 jamie-guest 8728
608 jmm-guest 12061 vgabios
609     - kvm <unfixed> (embed; bug #489442)
610    
611 nion 9244 bochs
612     - kvm <unfixed> (embed; bug #489442)
613    
614 jamie-guest 8729 speex
615     - vorbis-tools <unfixed> (embed)
616     NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
617     - gst-plugins-good0.10 <unfixed> (embed)
618     - xine-lib <unfixed> (embed)
619     - libfishsound <unfixed> (embed)
620     - libannodex <unfixed> (embed)
621     - vlc <unfixed> (embed)
622     - xmms-speex <unfixed> (embed)
623     - libsdl-sound1.2 <unfixed> (embed)
624     - sweep <unfixed> (embed)
625    
626 micah 8740 libreadline
627 gilbert-guest 12713 - magic <itp> (old-version)
628 micah 8739
629 micah 8740 opcode
630     - ode <unfixed> (embed)
631 micah 8739 NOTE: opcode is not a package in debian, it is just embedded
632     NOTE: http://www.codercorner.com/Opcode.htm
633 micah 8740
634     gimpact
635     - ode <unfixed> (embed)
636 micah 8739 NOTE: gimpact is not a package in debian, it is just embedded
637     NOTE: http://gimpact.sf.net
638 micah 8741
639 atomo64-guest 10248 mochikit
640 micah 8741 - mahara <unfixed> (embed)
641 atomo64-guest 10232 NOTE: they require extra patches, still unmerged upstream
642 micah 8741 - ntop <unfixed> (embed)
643 jwilk-guest 13183 - coherence 0.6.2-1 (embed)
644 atomo64-guest 11862 - paste <unfixed> (embed)
645     - turbogears <unfixed> (embed)
646     - plone3 <unfixed> (embed)
647 gilbert-guest 13204 - xulrunner <unfixed> (embed)
648 jwilk-guest 13209 - libjifty-plugin-chart-perl <unfixed> (embed)
649 gilbert-guest 13204 - sabnzbdplus <unfixed> (embed)
650     - tgmochikit <unfixed> (embed)
651 micah 8741
652 gilbert-guest 12710 prototypejs
653 gilbert-guest 12969 - netbeans-ide 6.0.1+dfsg-2 (embed)
654 gilbert-guest 13260 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
655 gilbert-guest 13242 - webcit <unfixed> (embed; bug #555219)
656 gilbert-guest 13202 - asterisk 1:1.6.2.0~rc3-1 (embed)
657 gilbert-guest 13260 - libjson-ruby 1.1.4-1 (embed; bug #555224)
658 gilbert-guest 13358 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
659 gilbert-guest 13242 - horde3 <unfixed> (embed)
660     - knowledgeroot <unfixed> (embed; bug #555230)
661     - mediatomb <unfixed> (embed; bug #555233)
662 gilbert-guest 13202 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
663 gilbert-guest 13242 - ebug-http <unfixed> (embed; bug #555236)
664 thijs 8871 - phpgedview <removed> (embed)
665 gilbert-guest 13242 - poker-network <unfixed> (embed; bug #555238)
666 gilbert-guest 13202 - rails 2.1.0-6 (embed)
667 gilbert-guest 13242 - wordpress 2.5.0-2 (embed; bug #555243)
668     - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
669     TODO: search through all of the other zope packages
670 atomo64-guest 10248 - ampache 3.4.1-2 (embed)
671 gilbert-guest 13358 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
672 derevko-guest 13312 - hobix 0.5~svn20070319-4 (embed; bug #555247)
673 gilbert-guest 13260 - zabbix 1.6.6-4 (embed; bug #555250)
674 gilbert-guest 13242 - chora2 <unfixed> (embed; bug #555253)
675     - gollem <unfixed> (embed; bug # 555254)
676 gilbert-guest 13260 - jscropperui 1.2.1-1 (embed; bug #555257)
677 gilbert-guest 13254 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
678 gilbert-guest 13242 - ingo1 <unfixed> (embed; bug #555261)
679     - kronolith2 <unfixed> (embed; bug #555262)
680 gilbert-guest 13201 - activeldap <unfixed> (embed)
681 gilbert-guest 13242 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
682     - mantis <unfixed> (embed; bug #555265)
683 gilbert-guest 13273 - otrs2 2.3.4-6 (embed; bug #555267)
684 gilbert-guest 13242 - webcalendar <unfixed> (embed; bug #555269)
685     - redmine 0.9.0~svn2907-1 (embed; bug #555270)
686 gilbert-guest 13285 - jifty 0.90519-1 (embed; bug #555271)
687 gilbert-guest 13242 - jquery <unfixed> (embed; bug #555272)
688 gilbert-guest 13260 - passenger 2.2.5debian1-1 (embed; bug #555273)
689 gilbert-guest 13242 - plone3 <unfixed> (embed; bug #555275)
690 gilbert-guest 13262 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
691 gilbert-guest 13411 - libhtml-prototype-perl <unfixed> (embed; bug #538920)
692 gilbert-guest 13201 - xulrunner <unfixed> (embed)
693     NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
694 micah 8741
695 keescook-guest 9036 gdb
696     - insight <unfixed> (embed)
697 fw 9779
698     e2fsprogs
699     - ldiskfsprogs <unfixable> (fork)
700 alfie 9797
701     quazip (not packaged in Debian)
702     - qcake <unfixed> (embed)
703     NOTE: starting with upstream version 0.6.4
704 nion 9857
705     exo
706     - pcmanfm <unfixed> (embed; bug #499677)
707 nion 9887 NOTE: slightly modified source code
708 stef-guest 10098
709     java
710     - openjdk-6 <unfixed>
711     - sun-java5 <unfixed>
712     - sun-java6 <unfixed>
713 white 10223
714     libphp-snoopy
715 white 10237 - ampache 3.4.1-2 (embed; bug #504169)
716 jmm-guest 13418 - gforge 4.6.99+svn6094-2 (embed)
717 jmm-guest 10253 - mahara 1.0.5-2 (embed; bug #504170)
718 geissert 12518 - pixelpost 1.7.1-5 (embed; bug #504171)
719 white 10237 - mediamate 0.9.3.6-5 (embed; bug #504172)
720 geissert 12518 - opendb <removed> (embed; bug #504173)
721     [etch] - opendb <unfixed> (embed; bug #504173)
722 jmm-guest 10256 - wordpress 2.5.1-9 (embed; bug #443948)
723 white 10511 - moodle <unfixed> (embed; bug #507185)
724 atomo64-guest 11862 [etch] - phpgroupware <unfixed> (embed)
725     NOTE: phpgroupware-felamimail
726 atomo64-guest 10234 - magpierss 0.72-3 (embed; bug #431089)
727 atomo64-guest 10232
728 atomo64-guest 10248 jquery
729 atomo64-guest 10232 - zekr <unfixed> (embed)
730 derevko-guest 12628 - wordpress <unknown> (embed)
731 atomo64-guest 10248 - yocto-reader <unfixed> (embed)
732     - textpattern <unfixed> (embed)
733 jmm-guest 10633 - genshi 0.5.1-1 (embed)
734 atomo64-guest 10248 NOTE: compressed file under examples/ dir
735     - prewikka <unfixed> (embed)
736     - libramaze-ruby <unfixed> (embed)
737     - drupal5 <unfixed> (embed)
738     - b2evolution <unfixed> (embed)
739 alfie 10832 - wesnoth <unfixed> (embed)
740 atomo64-guest 10232
741 alfie 10832 tablesorter (jquery plugin, not packaged yet)
742     - wesnoth <unfixed> (embed)
743    
744 atomo64-guest 10232 kses
745     - wordpress <unfixed> (embed; bug #504242)
746     NOTE: their copy has all methods renamed to wp_<foo>
747 derevko-guest 12628 NOTE: kses isn't in Debian, RFP: #504240
748 white 10511 - moodle <unfixed> (embed; bug #507185)
749 atomo64-guest 10630 - egroupware <unfixed> (embed)
750 atomo64-guest 10232
751     magpierss
752     - wordpress <unfixed> (embed; bug #504242)
753 atomo64-guest 11124 - moodle <unfixed>
754 atomo64-guest 10232
755     php-gettext
756 derevko-guest 12628 - wordpress 2.8.4-1 (embed; bug #504242)
757 atomo64-guest 10232
758     libphp-ixr (name may change, it is the Incutio XML-RPC)
759     - wordpress <unfixed> (embed; bug #504242)
760 derevko-guest 12628 NOTE: libphp-ixr isn't in Debian, RFP: #504236
761 atomo64-guest 10232 - dokuwiki <unfixed> (embed)
762     - textpattern <unfixed> (embed)
763 atomo64-guest 10248
764 atomo64-guest 10518 libphp-cas
765 atomo64-guest 10248 - glpi <unfixed> (embed)
766 geissert 12518 - moodle <unfixed> (embed; bug #505984)
767 atomo64-guest 10248
768 gilbert-guest 13242 scriptaculous (prototype.js is among the embeds in the following)
769 atomo64-guest 10248 - glpi <unfixed> (embed)
770 gilbert-guest 13242 - libaws <unfixed> (embed; bug #555222)
771 atomo64-guest 10248 - op-panel <unfixed> (embed)
772     - symfony <unfixed> (embed)
773     NOTE: maintainer says there are extra incompatible changes required
774 jwilk-guest 13311 - pixelpost 1.7.1-6 (embed)
775 atomo64-guest 11862 - webhelpers <unfixed> (embed)
776 gilbert-guest 13242 - qwik <unfixed> (embed; bug #555241)
777 atomo64-guest 10248 - smokeping <unfixed> (embed)
778     - turba2 <unfixed> (embed)
779 jmm-guest 10401 - typo3-src 4.2.3-1 (embed)
780 gilbert-guest 13201 - request-tracker3.6 <unfixed> (embed)
781 gilbert-guest 13203 - request-tracker3.8 <unfixed> (embed)
782 gilbert-guest 13285 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
783 gilbert-guest 13253 - wordpress 2.5.0-2 (embed)
784 atomo64-guest 10248
785     libmarkdown-php
786 white 10511 - moodle <unfixed> (embed; bug #507185)
787 jwilk-guest 13311 - pixelpost 1.7.1-6 (embed)
788 atomo64-guest 10248
789     php-openid
790     - wordpress-openid <itp> (embed)
791 atomo64-guest 10298
792     geshi
793 white 10346 - dokuwiki 0.0.20080505-3.1 (embed)
794 nion 10328 - pgfouine 1.0-1.1 (embed)
795 jmm-guest 11275 - websvn 2.1.0-1 (embed)
796 atomo64-guest 10315
797     webcalendar
798 gilbert-guest 12710 - gforge 4.7~rc2-6 (embed; bug #504758)
799 atomo64-guest 10320
800     libical
801     - kdepim <unfixed> (fork)
802     - kdepimlibs <unfixed> (fork)
803     NOTE: fixed in KDE4 post 4.1.x series
804 gilbert-guest 12710 - claws-mail-extra-plugins <unfixed> (fork)
805 atomo64-guest 10320
806     libltdl3
807     - kdelibs <unfixed> (embed)
808     NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
809 pabs 10877 - synfig <unfixed> (embed)
810 atomo64-guest 10320
811     harfbuzz
812     - qt4-x11 <unfixed> (embed)
813 atomo64-guest 10623
814     libzip
815     - php5 <unfixed> (fork)
816 jmm-guest 12061 - odt2txt <unfixed> (embed; bug #523808)
817 atomo64-guest 10630
818     json.php (not packaged; should be replaced with php's built-in functions)
819     - moodle <unfixed>
820     - yui <unfixed>
821     - gallery2 <unfixed>
822     - dokuwiki <unfixed>
823 atomo64-guest 11862 - typo3-src <unfixed>
824 atomo64-guest 10630
825     php-fpdf
826     - tcpdf <itp> (fork)
827     - moodle <unfixed>
828     - phpwiki <unfixed>
829     - egroupware <unfixed>
830     - ldap-account-manager <unfixed> (fork)
831    
832     tcpdf (itp: #495985)
833     - moodle <unfixed>
834     - phpmyadmin <unfixed>
835    
836     typo3
837     - moodle <unfixed>
838    
839     spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
840     - moodle <unfixed>
841     - gosa <unfixed>
842    
843     php-ole (itp: #487558)
844     - moodle <unfixed>
845    
846     pieforms (http://www.catalyst.net.nz)
847     - mahara <unfixed>
848    
849     savant2 (http://phpsavant.com)
850     - egroupware <unfixed>
851    
852     rssparser (http://nwow.org)
853     - egroupware <unfixed>
854     - phpgroupware <unfixed>
855 fw 10771
856     lcms
857     - openjdk-6 <unfixed> (fork)
858 atomo64-guest 11124
859     libphp-phplayersmenu
860     - diogenes <unfixed>
861     - phpldapadmin <unfixed>
862    
863     libphp-pclzip
864     - docvert <unfixed>
865     - moodle <unfixed>
866     - egroupware <unfixed>
867    
868     libphp-simplepie
869     - dokuwiki <unfixed>
870    
871     libphp-jpgraph
872     - egroupware <unfixed>
873    
874     php-simpletest
875     - moodle <unfixed>
876 jamie-guest 11344
877     libpng
878 gilbert-guest 12715 - iceweasel <not-affected> (uses xulrunner)
879 gilbert-guest 12710 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
880 jamie-guest 11344 - iceape 1.0.13~pre080614i-0etch1 (embed)
881 gilbert-guest 12718 - xulrunner 1.9.0.13-1 (embed)
882     [lenny] - xulrunner 1.9.0.11-0lenny1
883     [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
884 kees 13120 - gamera 3.2.3-1 (embed)
885 jamie-guest 11344
886 alfie 11443 irssi
887 atomo64-guest 11862 - silc-client <unfixed> (embed)
888     NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
889 alfie 11443
890 pabs 11485 extc
891     - mtasc <unfixed> (embed)
892     - haxe <unfixed> (embed)
893    
894     swflib
895     - mtasc <unfixed> (embed)
896     - haxe <unfixed> (embed)
897 kees 11600
898     libitext-java
899     - bouncycastle 2.1.4-1 (embed)
900 atomo64-guest 11860
901     python-ply
902 jwilk-guest 13247 - pyke <unfixed> (embed; bug #555363)
903     - pywbem <unfixed> (embed; bug #555364)
904     - sepolgen <unfixed> (embed; bug #555365)
905 jwilk-guest 13215 - zope-textindexng3 <unknown> (embed)
906     - iceweasel <unknown> (embed)
907     - xulrunner <unknown> (embed)
908 gilbert-guest 13242 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
909 pabs 11863
910     libdumbnet (libdnet upstream)
911     - nmap <unfixed> (fork)
912 thijs 12322
913     gcc-4.4
914     - gcc-mingw32 <unfixed> (embed)
915 thijs 12338
916     camlimages
917 gilbert-guest 12970 - advi <unfixed> (static; bug #550441)
918 pabs 12484
919 nion 12498 memcached
920     - memcachedb <unfixed> (embed)
921    
922 pabs 12707 yajl
923     - argyll <unfixed> (embed; bug #544223)
924 pabs 12484 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
925 nion 12532
926 jmm-guest 13418 nusoap
927     - gforge 4.8.2-1 (embed)
928    
929 gilbert-guest 12816 libept
930 nion 12532 - adept <unfixed> (embed; bug #540649)
931 gilbert-guest 12557
932 gilbert-guest 12816 libvorbis
933 gilbert-guest 12718 - iceweasel <not-affected> (uses xulrunner)
934 jwilk-guest 13210 - xulrunner <unfixed> (embed; bug #540959)
935 gilbert-guest 13195 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
936     [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
937 geissert 12604
938 gilbert-guest 12816 cairo
939 gilbert-guest 12718 - iceweasel <not-affected> (uses xulrunner)
940 gilbert-guest 12717 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
941    
942 gilbert-guest 13195 liboggz
943     - iceweasel <not-affected> (uses xulrunner)
944     - xulrunner <unfixed> (embed; bug #540949)
945     [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
946     [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
947    
948    
949     liboggplay
950     - iceweasel <not-affected> (uses xulrunner)
951     - xulrunner <unfixed> (embed; bug #540949)
952     [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
953     [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
954    
955 gilbert-guest 12816 php-net-dnsbl
956 geissert 12604 - serendipity <unfixed> (embed)
957    
958 gilbert-guest 12816 php-onyx-rss
959 geissert 12604 - serendipity <unfixed> (embed)
960    
961 gilbert-guest 12816 php-text-wiki
962 geissert 12604 - serendipity <unfixed> (embed)
963    
964 gilbert-guest 12816 php-xml-rpc
965 geissert 12604 - serendipity <unfixed> (embed)
966 pabs 12663
967     polarssl (does not have a shared library)
968 gilbert-guest 12815 - pdkim <itp> (embed; bug #543150)
969 gilbert-guest 12966 - xyssl <unfixed> (old-version)
970 gilbert-guest 12815
971     pidgin
972 gilbert-guest 12966 - gaim <removed> (old-version)
973 gilbert-guest 12840
974     icu
975 gilbert-guest 12841 - webkit 1.0.1-1 (embed; bug #547214)
976 gilbert-guest 12860 - texlive-bin <unfixed> (fork)
977 gilbert-guest 12859 NOTE: texlive upstream working with icu upstream to merge their changes
978 derevko-guest 12863
979 gilbert-guest 12864 cyrus-imapd-2.2
980 derevko-guest 12863 - kolab-cyrus-imapd <unfixed> (fork)
981 gilbert-guest 12864 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
982 nion 12870
983     python-cxx-dev
984     - freecad <unfixed> (embed; bug #547936)
985 nion 12871
986     libzipios++-dev
987     - freecad <unfixed> (embed; bug #547941)
988 gilbert-guest 12944
989     linux-2.6
990     - kvm <unfixed> (embed; bug #549973) [./kernel/*]
991 gilbert-guest 12962 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
992 gilbert-guest 13050 - kernel-source-2.6.8 <removed> (old-version)
993     - kernel-source-2.4.27 <removed> (old-version)
994     - kernel-source-2.4.24 <removed> (old-version)
995     - kernel-source-2.2.25 <removed> (old-version)
996     - kernel-source-2.2.20 <removed> (old-version)
997 gilbert-guest 12944
998     libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
999     - kvm <unfixed> (embed) [./libfdt/*]
1000 geissert 12961
1001     qweb (not packaged)
1002     - ajaxterm <unfixed>
1003 gilbert-guest 12965
1004     opensaml2
1005 gilbert-guest 12966 - opensaml <removed> (old-version)
1006 gilbert-guest 12965
1007     shibboleth-sp2
1008 gilbert-guest 12966 - shibboleth-sp <removed> (old-version)
1009 gilbert-guest 13054
1010     tuxonice-userui
1011     - suspend2-userui <removed> (old-version)
1012 gilbert-guest 13065
1013     expat
1014 jwilk-guest 13139 - w3c-libwww <removed> (embed; bug #551941)
1015     [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1016 gilbert-guest 13065 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1017 gilbert-guest 13160 - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1018     - python2.4 <unfixed> (embed; bug #553403)
1019     - wxwindows2.4 <removed> (embed)
1020     - wxwidgets2.6 <unfixed> (embed)
1021     - wxwidgets2.8 <unfixed> (embed)
1022 jwilk-guest 13176 - celementtree <unfixed> (embed)
1023 gilbert-guest 13160 - audacity <unfixed> (embed)
1024 jwilk-guest 13176 - matanza <unfixed> (embed)
1025 gilbert-guest 13160 - tdom <unfixed> (embed)
1026     - udunits <unfixed> (embed)
1027 sf 13185 - apr-util 1.2 (embed)
1028 gilbert-guest 13160 - ayttm <unfixed> (embed)
1029     - cableswig <unfixed> (embed)
1030     - cadaver <unfixed> (embed)
1031     - cmake <unfixed> (embed)
1032     - coin3 <unfixed> (embed)
1033     - gdcm <unfixed> (embed)
1034     - ghostscript <unfixed> (embed)
1035     - grmonitor <unfixed> (embed)
1036     - iceape <unfixed> (embed)
1037     - insighttoolkit <unfixed> (embed)
1038     - libparagui1.1 <unfixed> (embed)
1039     - paraview <unfixed> (embed)
1040     - poco <unfixed> (embed)
1041     - simgear <unfixed> (embed)
1042     - sitecopy <unfixed> (embed)
1043 jwilk-guest 13174 - smart 1.0-1 (embed)
1044     [etch] - smart <unfixed> (embed)
1045 jwilk-guest 13176 - swish-e <unfixed> (embed)
1046 gilbert-guest 13160 - tla <unfixed> (embed)
1047     - vtk <unfixed> (embed)
1048     - wbxml2 <unfixed> (embed)
1049     - xmlrpc-c <unfixed> (embed)
1050     - iceweasel <unfixed> (embed)
1051     - kompozer <unfixed> (embed)
1052     - vxl <unfixed> (embed)
1053     - xulrunner <unfixed> (embed)
1054 sf 13185 - apache2 2.2 (embed)
1055 gilbert-guest 13160 - texlive-bin <unfixed> (embed) [included twice]
1056     - vnc4 <unfixed> (embed)
1057     - xotcl <unfixed> (embed)
1058 gilbert-guest 13065
1059     xerces-c
1060     - xerces-c2 <unfixed> (old-version)
1061     - xerces27 <removed> (old-version)
1062    
1063     md5 (RSA's version; not the gnu version provided by coreutils)
1064 jwilk-guest 13139 - w3c-libwww <removed> (embed; bug #551942)
1065     [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1066 kees 13072
1067     enet
1068     - sauerbraten <unfixed> (embed; #497194)
1069 gilbert-guest 13116
1070     eglibc
1071     - glibc <removed> (old-version)
1072 kees 13120
1073     galib
1074     - gamera 3.2.3-1 (embed)
1075 jwilk-guest 13143
1076 jwilk-guest 13146 configobj
1077 jwilk-guest 13247 - bzr <unfixed> (embed; bug #555336)
1078     - elisa <unfixed> (embed; bug #555337)
1079     - gaupol <unfixed> (embed; bug #555338)
1080     - ipython <unfixed> (embed; bug #555339)
1081     - pida <unfixed> (embed; bug #555340)
1082     - psychopy <unfixed> (embed; bug #555341)
1083     - rest2web <unfixed> (embed; bug #555342)
1084 jwilk-guest 13143 - auth2db <unknown> (embed)
1085     - dynagen <unknown> (embed)
1086     - iceweasel <unknown> (embed)
1087     - sabnzbdplus <unknown> (embed)
1088     - xulrunner <unknown> (embed)
1089 gilbert-guest 13242 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1090 jwilk-guest 13147
1091     python-clientform
1092 jwilk-guest 13247 - bibus <unfixed> (embed; bug #555332)
1093     - zope2.10 <unfixed> (embed; bug #555333)
1094     - zope2.11 <unfixed> (embed; bug #555334)
1095 jwilk-guest 13147 - python-mechanize <unknown> (embed)
1096     - twill <unknown> (embed)
1097    
1098     python-mechanize
1099 jwilk-guest 13247 - zope2.10 <unfixed> (embed; bug #555337)
1100     - zope2.11 <unfixed> (embed; bug #555338)
1101     - twill <unknown> (embed; bug #555339)
1102 jwilk-guest 13147
1103     pexpect
1104 jwilk-guest 13288 - duplicity 0.6.06-1 (embed; bug #555361)
1105 jwilk-guest 13247 - hplip <unfixed> (embed; bug #555362)
1106     - smart <unfixed> (embed; bug #555363)
1107 jwilk-guest 13147
1108     pyparsing
1109 jwilk-guest 13247 - bauble <unfixed> (embed; bug #555366)
1110 jwilk-guest 13290 - boa-constructor 0.6.1-8 (embed; bug #555367)
1111 jwilk-guest 13247 - calibre <unfixed> (embed; bug #555368)
1112     - matplotlib <unfixed> (embed; bug #531024)
1113     - zhpy <unfixed> (embed; bug #555370)
1114 jwilk-guest 13147 - polybori <unknown> (embed)
1115     - python-whoosh <unknown> (embed)
1116     - twill <unknown> (embed)
1117     - zope-textindexng3 <unknown> (embed)
1118 gilbert-guest 13160
1119     python-pysqlite2
1120     - python2.4 <unfixed> (embed; bug #553403)
1121     - python2.5 <unfixed> (embed; bug #553403)
1122 jwilk-guest 13174
1123     celementtree
1124     - python2.5 <unfixed> (embed)
1125     - smart 1.0-1 (embed)
1126     [etch] - smart <unfixed> (embed)
1127 jwilk-guest 13179
1128     elementtree
1129     - python2.5 <unfixed> (embed)
1130 jwilk-guest 13247 - bzr <unfixed> (embed; bug #555343)
1131 jwilk-guest 13276 - gedit 2.28.2-1 (embed; bug #555344)
1132 jwilk-guest 13179 - smart 1.0-1 (embed)
1133     [etch] - smart <unfixed> (embed)
1134 jwilk-guest 13247 - solfege <unfixed> (embed; bug #555345)
1135     - w3af <unfixed> (embed; bug #555346)
1136 jwilk-guest 13179 - python-qt4 <unknown> (embed)
1137     - sphinx <unknown> (embed)
1138     - python-nltk <itp> (embed)
1139 jwilk-guest 13180
1140     python2.5
1141     - python2.4 <unfixed> (old-version)
1142     - jython <unfixed> (embed)
1143     NOTE: embeds many stdlib modules
1144 jwilk-guest 13252 - python-django <unfixed> (embed; bug #555419)
1145 jwilk-guest 13212 NOTE: embeds stdlib modules: doctest, decimal
1146 jwilk-guest 13180 - gamera 3.2.3-1 (embed)
1147     NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1148 jwilk-guest 13252 - boa-constructor <unfixed> (embed; bug #555426)
1149 jwilk-guest 13289 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1150 jwilk-guest 13252 - nicotine <unfixed> (embed; bug #555427)
1151 jwilk-guest 13180 NOTE: embeds stdlib modules: ConfigParser
1152 jwilk-guest 13252 - museek+ <unfixed> (embed; bug #555428)
1153 jwilk-guest 13180 NOTE: embeds stdlib modules: ConfigParser
1154     - vegastrike-data <unfixed> (embed)
1155     NOTE: embeds many stdlib modules
1156 jwilk-guest 13413 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1157 jwilk-guest 13180 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1158 jwilk-guest 13252 - config-manager <unfixed> (embed; bug #555423)
1159 jwilk-guest 13180 NOTE: embeds stdlib modules: optparse
1160 jwilk-guest 13392 - jhbuild 2.28.0-1 (embed; bug #555421)
1161 jwilk-guest 13180 NOTE: embeds stdlib modules: optparse, subprocess
1162 jwilk-guest 13252 - smart <unfixed> (embed; bug #555432)
1163 jwilk-guest 13180 NOTE: embeds stdlib modules: optparse
1164 jmm-guest 13418 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1165 jwilk-guest 13180 NOTE: embeds stdlib modules: doctest
1166 jwilk-guest 13413 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1167 jwilk-guest 13180 NOTE: embeds stdlib modules: doctest
1168     - distribute <unfixed> (embed)
1169     NOTE: embeds stdlib modules: doctest
1170 jwilk-guest 13252 - python-setuptools <unfixed> (embed; bug #555435)
1171 jwilk-guest 13180 NOTE: embeds stdlib modules: doctest
1172 jwilk-guest 13252 - zope.testing <unfixed> (embed; bug #555436)
1173 jwilk-guest 13180 NOTE: embeds stdlib modules: doctest
1174 jwilk-guest 13252 - translate-toolkit <unfixed> (embed; bug #555422)
1175 jwilk-guest 13180 NOTE: embeds stdlib modules: textwrap, contextlib
1176 jwilk-guest 13252 - libtpclient-py <unfixed> (embed; bug #555424)
1177 jwilk-guest 13180 NOTE: embeds stdlib modules: subprocess
1178 jwilk-guest 13252 - grass <unfixed> (embed; bug #555425)
1179 jwilk-guest 13180 NOTE: embeds stdlib modules: subprocess
1180 jwilk-guest 13252 - coherence <unfixed> (embed; bug #555429)
1181 jwilk-guest 13182 NOTE: embeds stdlib modules: uuid
1182 jwilk-guest 13396 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1183 jwilk-guest 13182 NOTE: embeds stdlib modules: uuid
1184 jwilk-guest 13252 - setroubleshoot <unfixed> (embed; bug #555431)
1185 jwilk-guest 13182 NOTE: embeds stdlib modules: uuid
1186 jwilk-guest 13252 - linkchecker <unfixed> (embed; bug #555414)
1187 jwilk-guest 13180 NOTE: embeds msgfmt.py script
1188     - imdbpy <unfixed> (embed)
1189     NOTE: embeds msgfmt.py script
1190     - kiwi <unfixed> (embed)
1191     NOTE: embeds msgfmt.py script
1192     - moin <unfixed> (embed)
1193 jwilk-guest 13289 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1194 jwilk-guest 13180 - plone3 <unfixed> (embed)
1195     NOTE: embeds msgfmt.py script
1196     - roundup <unfixed> (embed)
1197 jwilk-guest 13289 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1198 jwilk-guest 13252 - rednotebook <unfixed> (embed; bug #555415)
1199 jwilk-guest 13180 NOTE: embeds msgfmt.py script
1200     - turbogears <unfixed> (embed)
1201     NOTE: embeds msgfmt.py script
1202     - elisa <unfixed> (embed)
1203 jwilk-guest 13182 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1204 jwilk-guest 13180 - calibre <unfixed> (embed)
1205 jwilk-guest 13289 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1206 jwilk-guest 13252 - mailman <unfixed> (embed; #555416)
1207 jwilk-guest 13180 NOTE: embeds msgfmt.py script
1208     - python-docutils <unknown> (embed)
1209     NOTE: embeds stdlib modules: optparse, textwrap
1210     - python-imaging <unknown> (embed)
1211     NOTE: embeds stdlib modules: doctest
1212     - python-mechanize <unknown> (embed)
1213     NOTE: embeds stdlib modules: doctest
1214     - twill <unknown> (embed)
1215     NOTE: embeds stdlib modules: subprocess
1216     - zeroc-ice <unknown> (embed)
1217     NOTE: embeds stdlib modules: subprocess
1218     - wxwidgets2.8 <unknown> (embed)
1219     NOTE: embeds stdlib modules: subprocess
1220     - cycle <unknown> (embed)
1221     NOTE: embeds msgfmt.py script
1222     - deluge <unknown> (embed)
1223     NOTE: embeds msgfmt.py script
1224     - opendict <unknown> (embed)
1225     NOTE: embeds msgfmt.py script
1226     - openerp-client <unknown> (embed)
1227     NOTE: embeds msgfmt.py script
1228     - rapidsvn <unknown> (embed)
1229     NOTE: embeds msgfmt.py script
1230     - wammu <unknown> (embed)
1231     NOTE: embeds msgfmt.py script
1232     - gaphor <unknown> (embed)
1233     NOTE: embeds msgfmt.py script
1234     - pida <unknown> (embed)
1235     NOTE: embeds msgfmt.py script
1236     - python-formencode <unknown> (embed)
1237     NOTE: embeds msgfmt.py script
1238 jwilk-guest 13288 - duplicity <unfixed> (embed)
1239     NOTE: embeds stdlib module: urlparse, tarfile
1240 jwilk-guest 13386 - pygopherd <unfixed> (embed)
1241 jwilk-guest 13289 NOTE: embeds stdlib module: zipfile
1242 jwilk-guest 13182
1243     argparse
1244 jwilk-guest 13247 - twill <unfixed> (embed; bug #555347)
1245     - ipython <unfixed> (embed; bug #555348)
1246 jwilk-guest 13182
1247     coherence
1248 jwilk-guest 13247 - elisa <unfixed> (embed; bug #555335)
1249 jwilk-guest 13182
1250     simpletal
1251 jwilk-guest 13247 - plastex <unfixed> (embed; bug #555371)
1252 jwilk-guest 13182
1253     flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1254     - postr <unfixed> (embed)
1255     - elisa <unfixed> (embed)
1256    
1257     simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1258     - apertium-tolk <unfixed> (embed)
1259     - ipython <unfixed> (embed)
1260     - virtaal <unfixed> (embed)
1261    
1262     distribute
1263     - setuptools <removed> (old-version)
1264 gilbert-guest 13201
1265     rails
1266     - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1267     - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1268     - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1269     - thin <unfixed> (embed) [./spec/rails_app/*]
1270     NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1271     NOTE: be dangerous if developers are naively basing their code off of the examples
1272     NOTE: prototype.js is among the example files
1273 gilbert-guest 13205
1274 gilbert-guest 13242 lucene2 (prototype.js is among the embeds in the following)
1275 gilbert-guest 13205 - lucene <unfixed> (old-version)
1276     - pylucene <unfixed> (embed)
1277     - libpdfbox-java <unfixed> (embed)
1278     - libfontbox-java <unfixed> (embed)
1279     - libjempbox-java <unfixed> (embed)
1280     - solr <unfixed> (embed)
1281 gilbert-guest 13206
1282     unicode-data
1283     - syslinux <unfixed> (embed)
1284     - camomile <unfixed> (embed)
1285     - fribidi <unfixed> (embed)
1286     - m17n-db <unfixed> (embed)
1287     - sbcl <unfixed> (embed)
1288     - heimdal <unfixed> (embed)
1289     - icu <unfixed> (embed)
1290     - icu4j <unfixed> (embed)
1291     - krb5 <unfixed> (embed)
1292     - moodle <unfixed> (embed)
1293     - openldap <unfixed> (embed)
1294     - pike7.6 <unfixed> (embed)
1295     - samba <unfixed> (embed)
1296     - samba4 <unfixed> (embed)
1297     - cmucl <unfixed> (embed)
1298     - typo3-src <unfixed> (embed)
1299     - mauve <unfixed> (embed)
1300     - texlive-bin <unfixed> (embed)
1301     - ypsilon <unfixed> (embed)
1302     - jeuclid <unfixed> (embed)
1303     - charmap.app <unfixed> (embed)
1304     - clisp <unfixed> (embed)
1305     - gnulib <unfixed> (embed)
1306     - opensrs-client <unfixed> (embed)
1307     - saxonb <unfixed> (embed)
1308     - rails <unfixed> (embed)
1309 jwilk-guest 13208
1310     feedparser
1311 jwilk-guest 13216 - rawdog <unfixed> (embed; bug #383422)
1312 jwilk-guest 13249 - miro <unfixed> (embed; bug #555351)
1313 jwilk-guest 13247 - calibre <unfixed> (embed; bug #555352)
1314     - freevo <unfixed> (embed; bug #555353)
1315     - pida <unfixed> (embed; bug #555354)
1316     - planet-venus <unfixed> (embed; bug #555355)
1317     - plone3 <unfixed> (embed; bug #555356)
1318 jwilk-guest 13267 - exaile 0.2.14+debian-1 (embed)
1319     - screenlets 0.1.2-3 (embed)
1320 jwilk-guest 13212 NOTE: included twice
1321 jwilk-guest 13224
1322     agg:
1323     - matplotlib <unfixed> (embed: bug #377271)
1324     - contextfree <unfixed> (embed)
1325     NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1326     - exactimage <unfixed> (embed)
1327     - python-enable <unfixed> (embed)
1328     - mapnik 0.5.1-3 (embed)
1329     NOTE: links statically to agg, but shared library is not available (bug #377271)
1330 gilbert-guest 13227
1331     vtk
1332     - paraview <unfixable> (embed; bug #495426)
1333 jwilk-guest 13236
1334     txt2tags
1335     - rednotebook <unfixed> (embed)
1336    
1337     htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1338     - gajim <unfixed> (embed)
1339     - emesene <unfixed> (embed)
1340     - convirt <unfixed> (embed)
1341     - pida <unfixed> (embed)
1342     - rednotebook <unfixed> (embed)
1343 gilbert-guest 13242
1344     horde3 (prototype.js is among the embeds in the following)
1345     - mnemo2 <unfixed> (embed)
1346     - nag2 <unfixed> (embed)
1347 jwilk-guest 13248
1348     cimg
1349     - gmic <itp> (embed)
1350    
1351     mootools
1352     - gmic <itp> (embed)
1353 gilbert-guest 13273
1354     openldap
1355     - openldap2.3 <removed> (old-version)
1356    
1357     grub2
1358     - grub <unfixed> (old-version)
1359 jwilk-guest 13288
1360     gnupginterface
1361     - duplicity <unfixed> (embed)
1362 jwilk-guest 13291
1363     python-dateutil
1364     - awn-extras-applets <unfixed> (embed)
1365     - matplotlib <unknown> (embed)
1366 gilbert-guest 13358
1367     cups
1368     - cupsys <removed> (old-version)
1369    
1370     yui
1371     - bcfg2 <not-affected> (present in source but not included in any binary files)
1372     - serendipity <unfixed> (embed; bug #557746)
1373     - moodle 1.8.2.dfsg-5 (embed)
1374     - jifty <unfixed> (embed; bug #557748)
1375     - webgui 7.7.26-1 (embed)
1376     - loggerhead 1.17-1 (embed)

  ViewVC Help
Powered by ViewVC 1.1.5