/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 12864 by gilbert-guest, Mon Sep 21 19:21:19 2009 UTC revision 13845 by jmm-guest, Sun Jan 17 11:52:36 2010 UTC
# Line 15  status: version number fixing the embedd Line 15  status: version number fixing the embedd
15          be determined, or <unfixable> for unavoidable cases (e.g., forks          be determined, or <unfixable> for unavoidable cases (e.g., forks
16          that add real value)          that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and        modified-embed (embeds a code copy that differs from upstream code)
20              thus might share parts of the source code)        fork (a full-blown fork of another source package)
21        old-version (the package is an older version of essentially        old-version (an older version of essentially the same code)
                    the same code)  
22    
23  The srcpkg might be some string to identify the code if there is no  The srcpkg might be some string to identify the code if there is no
24  specific source package.  specific source package.
# Line 28  Everything up to the next line is ignore Line 27  Everything up to the next line is ignore
27  ---BEGIN  ---BEGIN
28  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         NOTE: has been replaced by evince in etch  
30          - pdftohtml <unknown>          - pdftohtml <unknown>
31          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
32          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
# Line 45  xpdf (some srcpkgs use xpdf2 code, some Line 43  xpdf (some srcpkgs use xpdf2 code, some
43          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
44          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
45          - pdfedit <unfixed> (embed; bug #510794)          - pdfedit <unfixed> (embed; bug #510794)
46          - swftools <unfixed> (embed)          - swftools <unfixed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48    
49  ppmd  ppmd
50          - libcomplearn-mod-ppmd <unfixed> (fork)          - libcomplearn-mod-ppmd <unfixed> (fork)
# Line 56  libevent Line 55  libevent
55    
56  lrmi  lrmi
57          - read-edid 2.0.0-1 (embed; bug #495131)          - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59            - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61    
62  peercast  peercast
63          - gnome-peercast <unfixed> (embed)          - gnome-peercast <removed> (embed)
64          NOTE: gnome-peercast may better be removed, see #466539          [etch] - gnome-peercast <unfixed> (embed)
65    
66  silc-toolkit  silc-toolkit
67          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
# Line 76  libmikmod Line 78  libmikmod
78          TODO: report bug          TODO: report bug
79    
80  libiax  libiax
81          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
82    
83    spandsp
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86    python-paramiko
87            - fabric 0.9.0-2 (embed; bug #561398)
88    
89  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
90          - dpkg <unfixed> (embed)          - dpkg <unfixed> (static)
91          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
92          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
93            - cherokee <unfixed> (embed)
94          NOTE: somehow derived code base          NOTE: somehow derived code base
95          - mono <unfixed> (embed)          - mono <unfixed> (embed)
96          TODO: check mozilla          TODO: check mozilla
# Line 109  zlib (lots of apps embed a copy, but lin Line 118  zlib (lots of apps embed a copy, but lin
118          - perl <unfixed>          - perl <unfixed>
119          - paraview <unfixed>          - paraview <unfixed>
120          - gcvs <unfixed>          - gcvs <unfixed>
         - erlang <unfixed>  
121          - dump <unfixed>          - dump <unfixed>
122          - aide <unfixed> (static)          - aide <unfixed> (static)
123          - dar <unfixed> (static)          - dar <unfixed> (static)
# Line 120  zlib (lots of apps embed a copy, but lin Line 128  zlib (lots of apps embed a copy, but lin
128          - lazarus <unfixed>          - lazarus <unfixed>
129          NOTE: inherited from fpc, see #472304          NOTE: inherited from fpc, see #472304
130          - erlang <unfixed> (embed)          - erlang <unfixed> (embed)
131            - gamera 3.2.3-1 (embed)
132            - python2.4 <unfixed> (embed; bug #553403)
133            - python2.5 <unfixed> (embed; bug #553403)
134    
135  dulwich  dulwich
136          - hg-git <unfixed> (embed; bug #541996)          - hg-git 0.1.0-1 (embed; bug #541996)
137    
138  libvigraimpex  libvigraimpex
139          - hugin <unfixed> (embed; bug #542259)          - hugin <unfixed> (embed; bug #542259)
140          - enblend-enfuse <unfixed> (embed; bug #542258)          - enblend-enfuse <unfixed> (embed; bug #542258)
141            - gamera 3.2.3-1 (embed)
142    
143  libbz2  libbz2
144          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
145    
146    libyahoo2
147            - centerim <unfixed> (embed; bug #559783)
148    
149    libmsn
150            - centerim <unfixed> (embed; bug #559783)
151    
152  libgadu  libgadu
153          - centericq <unfixed> (embed)          - centerim <unfixed> (embed; bug #559783)
154          - pidgin <unfixed> (embed)          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
155          NOTE: pidgin links dynamically against libgadu; that should be fixed, then???          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
156          - kdenetwork 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
157          NOTE: from kdenetwork: kopete          NOTE: from kdenetwork: kopete
158          - ekg 1:1.8~rc0-1 (embed)          - ekg 1:1.8~rc0-1 (embed)
# Line 153  shtool (affects build-time only) Line 171  shtool (affects build-time only)
171          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
172          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
173    
174  iceape  xulrunner
175          - iceweasel <unfixed> (fork)          - iceape <unfixed> (embed; bug #561749)
176          - icedove <unfixed> (fork)          - iceweasel 2.0.0.19 (embed)
177          - xulrunner <unfixed> (fork)          - icedove <unfixed> (embed; bug #561750)
178          - kompozer <unfixed> (embed; bug #532168)          - kompozer <unfixed> (embed; bug #532168)
179            - galeon 2.0.2-4 (embed)
180            - epiphany-browser 2.14.3-8 (embed)
181            - conkeror 0.9~git080629-2 (embed)
182            - kazehakase 0.4.2-1 (embed)
183    
184  xli  xli
185          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
# Line 187  libbsd Line 209  libbsd
209          - atheme-services <unfixed>          - atheme-services <unfixed>
210          - libbsd-arc4random-perl <unfixed>          - libbsd-arc4random-perl <unfixed>
211          - isakmpd <unfixed>          - isakmpd <unfixed>
212            - bsdgames <unfixed> (embed)
213            - bsd-mailx <unfixed> (embed)
214            - netcat-openbsd <unfixed> (embed; bug #550611)
215            - openssh <unfixed> (embed)
216            - unworkable <unfixed> (embed)
217    
218  cvs  cvs
219          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
220          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
221    
222  pcre  pcre3
         - python* <unfixed> (embed)  
223          - php4 <unknown> (embed)          - php4 <unknown> (embed)
224          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
225          - goffice <unfixed> (embed)          - goffice <unfixed> (embed)
# Line 208  pcre Line 234  pcre
234          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
235          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
236          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
237          - tin <unknown> (embed)          - tin 980117-1 (embed)
238          - kazehakase 0.5.2-1          - kazehakase 0.5.2-1
239          - webkit 1.0.1-1 (embed)          - webkit 1.0.1-1 (embed)
240          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
241          NOTE: embedded via webkit copy          NOTE: embedded via webkit copy
242          - erlang <unfixed> (embed)          - erlang <unfixed> (embed)
243            - ssed <unfixed> (embed)
244    
245  tiff  tiff
246          - wxwindows2.4 2.2.1 (embed)          - wxwindows2.4 2.2.1 (embed)
247            - gamera 3.2.3-1 (embed)
248    
249  uudeview  uudeview
250          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
# Line 226  sqlite (not affected by security vulnera Line 254  sqlite (not affected by security vulnera
254          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
255          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
256          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
257            - heimdal <unfixed> (embed; bug #559616)
258    
259  util-linux/mount  util-linux/mount
260          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
# Line 253  ffmpeg (libavcodec/libavformat) Line 282  ffmpeg (libavcodec/libavformat)
282          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
283          - motion 3.1.19-1          - motion 3.1.19-1
284          - gstreamer0.10-ffmpeg 0.10.3-2          - gstreamer0.10-ffmpeg 0.10.3-2
285          - xmovie <removed>          - xmovie <removed> (static)
286          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
287          - avifile <unfixed> (embed; bug #538750)          - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
288            - audacity 1.3.7-2 (embed; bug #512278)
289    
290  faad2  faad2
291          - mplayer 1.0~rc2-20 (embed)          - mplayer 1.0~rc2-20 (embed)
292          - avifile <unfixed> (embed; bug #538750)          - avifile <unfixed> (embed; bug #538750)
293            - ffmpeg-debian <removed> (old-version)
294    
295  libmad (MPEG decoding lib)  libmad (MPEG decoding lib)
296          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
297          - avifile <unfixed> (embed) [./plugins/libmad/*]          - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
298          TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2          TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
299    
300  libdts  libdts
# Line 280  libmpeg2 Line 311  libmpeg2
311          - mpeg2dec <unfixed> (embed)          - mpeg2dec <unfixed> (embed)
312          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
313    
314  curl  libntlm
315          - wget <unfixed> (embed)          - wget <unfixed> (fork; bug #550436)
316          NOTE: code for NTLM authentication          - curl <unfixed> (fork; bug #550437)
317            - cntlm <unfixed> (fork; bug #550438)
318    
319  uw-imap  uw-imap
320          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 293  imagemagick Line 325  imagemagick
325    
326  python-urlgrabber  python-urlgrabber
327          - mercurial <unfixed> (embed; bug #531062)          - mercurial <unfixed> (embed; bug #531062)
328            - w3af <unfixed> (embed; bug #555372)
329            [experimental] - harvestman <unfixed> (embed; bug #555373)
330    
331  python-mechanize  beautifulsoup
332          - beautifulsoup <unfixed> (embed)          - python-mechanize <unfixed> (embed; bug #555349)
333            - zope2.11 <removed> (embed; bug #555350)
334            - twill <unknown> (embed)
335    
336  halibut  halibut
337          - nsis <unfixed> (fork)          - nsis <unfixed> (fork)
# Line 328  fckeditor Line 364  fckeditor
364          - karrigell <removed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
365          - gforge 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
366          - request-tracker3.8 <unfixed> (embed)          - request-tracker3.8 <unfixed> (embed)
367            - otrs2 <unfixed> (embed)
368    
369  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
370          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
# Line 344  libphp-phpmailer Line 381  libphp-phpmailer
381  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
382          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
383    
384  giflib:  giflib
385          - wine <unfixed> (embed; bug #466181)          - wine <unfixed> (embed; bug #466181)
386    
387  bennu (not packaged in Debian, http://bennu.sourceforge.net)  bennu (not packaged in Debian, http://bennu.sourceforge.net)
388          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
389    
390  smarty:  smarty
391          - moodle 1.8.2-2 (embed; bug #471158)          - moodle 1.8.2-2 (embed; bug #471158)
392          - gallery2 2.2.5-2 (embed; bug #471160)          - gallery2 2.2.5-2 (embed; bug #471160)
393          - mahara 0.9.2-2 (embed; bug #471201)          - mahara 0.9.2-2 (embed; bug #471201)
# Line 398  neon Line 435  neon
435          [etch] - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
436          - litmus <removed> (embed; #395875)          - litmus <removed> (embed; #395875)
437          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
438          - sitecopy 1:0.16.3-5 (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
439          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
440          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
441    
# Line 411  libvncserver Line 448  libvncserver
448  putty  putty
449          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
450    
451  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
452          - filezilla <unfixed>          - filezilla <unfixed>
453            - crystalspace <unfixed> (embed)
454            - libwfut <unfixed> (embed)
455            - rarian <unfixed> (embed)
456            - bulletml <unfixed> (embed)
457            - pokerth <unfixed> (embed)
458            - qutecom <unfixed> (embed)
459            - sofa-framework <unfixed> (embed)
460            - yate <unfixed> (embed)
461            - antigrav <unfixed> (embed)
462            - balder2d <unfixed> (embed)
463            - cal3d <unfixed> (embed)
464            - criticalmass <unfixed> (embed)
465            - ember <unfixed> (embed)
466            - epiphany <unfixed> (embed)
467            - gambit <unfixed> (embed)
468            - noiz2sa <unfixed> (embed)
469            - ogre <unfixed> (embed)
470            - opencity <unfixed> (embed)
471            - openmovieeditor <unfixed> (embed)
472            - pouetchess <unfixed> (embed)
473            - tecnoballz <unfixed> (embed)
474            - trigger-rally <unfixed> (embed)
475            - xmoto <unfixed> (embed)
476            - mapnik <unknown> (embed)
477            NOTE: uses a different XML parser by default
478            - rrootage 0.23a-6 <embed>
479            NOTE: links to libbulltetml
480            - boson <unknown> (embed)
481            NOTE: the embedded code is unused
482    
483  gv  gv
484          - evince <unfixed> (embed)          - evince <unfixed> (embed)
# Line 466  librpcsecgss Line 532  librpcsecgss
532          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
533    
534  jasper  jasper
535          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
536    
537  libiris  libiris
538          - psi <unfixed> (embed)          - psi <unfixed> (embed)
# Line 483  libidn Line 548  libidn
548          - kdegames <unfixed> (embed)          - kdegames <unfixed> (embed)
549          NOTE: kdegames/kde4 embeds libiris which embeds libidn          NOTE: kdegames/kde4 embeds libiris which embeds libidn
550    
551  liblua  lua5.1
552          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
553          - nmap <unfixed> (embed; bug #527997)          - nmap 5.00-1 (embed; bug #527997)
554          NOTE: fixed upstream as of nmap svn rev13336.          [lenny] - nmap <unfixed> (embed; bug #527997)
555            - ocropus <unfixed> (embed)
556            - enigma <unfixed> (embed)
557            NOTE: requires lua built with C++
558            - freeciv <unfixed> (embed)
559            - spring <unfixed> (embed)
560    
561  libbotan  libbotan
562          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
# Line 522  guichan Line 592  guichan
592  tolua  tolua
593          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
594          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
595            NOTE: actually tolua++
596            - ocropus <unfixed> (embed)
597            NOTE: actually tolua++
598            - freeciv <unfixed> (embed)
599            NOTE: actually tolua++
600            - enigma <unfixed> (embed)
601    
602  asio-dev  asio-dev
603          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
604    
605  xine-lib  xine-lib
606          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 559  fribidi Line 633  fribidi
633  glew  glew
634          - quesoglc <unfixed> (embed; bug #489341)          - quesoglc <unfixed> (embed; bug #489341)
635          NOTE: waiting on GLEW_MX version of glew (see bug #474488)          NOTE: waiting on GLEW_MX version of glew (see bug #474488)
636            - trigger <unfixed> (embed)
637            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
638            - trigger-rally <unfixed> (embed)
639            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
640    
641  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
642          - transcend <unfixed> (embed)          - transcend <unfixed> (embed)
# Line 574  cpio Line 652  cpio
652          - libarchive <unfixed> (embed)          - libarchive <unfixed> (embed)
653          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
654    
655    kde4libs
656            - kdelibs <unfixable> (old-version)
657    
658  webkit  webkit
659          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed; bug #479851)
660            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
661            [lenny] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
662            - kde4libs <unfixable> (fork)
663            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
664            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
665    
666  ftgl  ftgl
667          - blender 2.46+dfsg-1 (embed)          - blender 2.46+dfsg-1 (embed)
# Line 585  wv Line 671  wv
671    
672  qemu  qemu
673          - kvm <unfixed> (embed; bug #543159)          - kvm <unfixed> (embed; bug #543159)
674          - xen-3 <unfixed> (embed)          NOTE: the kvm package will be removed from sid and squeeze soon (after
675          - xen-unstable <unfixed> (embed)          NOTE: which it will only be in experimental). superceded by qemu-kvm.
676            - qemu-kvm <unfixed> (embed; bug #560853)
677            - xen-3 3.4.2-2 (embed; bug #560856)
678            - xen-unstable <unfixed> (embed; bug #560856)
679    
680  vgabios  vgabios
681          - kvm <unfixed> (embed; bug #489442)          - kvm <unfixed> (embed; bug #489442)
# Line 600  speex Line 689  speex
689          - gst-plugins-good0.10 <unfixed> (embed)          - gst-plugins-good0.10 <unfixed> (embed)
690          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
691          - libfishsound <unfixed> (embed)          - libfishsound <unfixed> (embed)
692          - libannodex <unfixed> (embed)          - libannodex <removed> (embed)
693          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
694          - xmms-speex <unfixed> (embed)          - xmms-speex <unfixed> (embed)
695          - libsdl-sound1.2 <unfixed> (embed)          - libsdl-sound1.2 <unfixed> (embed)
# Line 623  mochikit Line 712  mochikit
712          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
713          NOTE: they require extra patches, still unmerged upstream          NOTE: they require extra patches, still unmerged upstream
714          - ntop <unfixed> (embed)          - ntop <unfixed> (embed)
715          - coherence <unfixed> (embed)          - coherence 0.6.2-1 (embed)
         NOTE: python-coherence  
716          - paste <unfixed> (embed)          - paste <unfixed> (embed)
         NOTE: python-paste  
717          - turbogears <unfixed> (embed)          - turbogears <unfixed> (embed)
718          NOTE: python-turbogears          - plone3 <removed> (embed)
719          - plone3 <unfixed> (embed)          - xulrunner <unfixed> (embed)
720          NOTE: zope-plone3          - libjifty-plugin-chart-perl <unfixed> (embed)
721            - sabnzbdplus <unfixed> (embed)
722            - tgmochikit <unfixed> (embed)
723    
724  prototypejs  prototypejs
725          - netbeans-ide <unfixed> (embed)          - netbeans-ide 6.0.1+dfsg-2 (embed)
726          - auth2db <unfixed> (embed)          - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
727          - webcit <unfixed> (embed)          - webcit <unfixed> (embed; bug #555219)
728          NOTE: citadel-webcit          - asterisk 1:1.6.2.0~rc3-1 (embed)
729          - asterisk <unfixed> (embed)          - libjson-ruby 1.1.4-1 (embed; bug #555224)
730          - doc-iana <unfixed> (embed)          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
731          - libaws <unfixed> (embed)          - horde3 <unfixed> (embed)
732          NOTE: libaws-doc          - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
733          - libgettext-ruby <unfixed> (embed)          - mediatomb <unfixed> (embed; bug #555233)
734          NOTE: libgettext-ruby-data          - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
735          - libjson-ruby <unfixed> (embed)          - ebug-http <removed> (embed; bug #555236)
736          NOTE: libjson-ruby-doc          - libaws 2.7-1 (embed; bug #555222)
         - lucene2 <unfixed> (embed)  
         NOTE: liblucene2-java-doc  
         - libopenid-ruby <unfixed> (embed)  
         - solr <unfixed> (embed)  
         NOTE: solr-common  
         - glpi <unfixed> (embed)  
         - mnemo2 <unfixed> (embed)  
         - nag2 <unfixed> (embed)  
         - knowledgeroot <unfixed> (embed)  
         - mediatomb <unfixed> (embed)  
         NOTE: mediatomb-common  
         - mt-daapd <unfixed> (embed)  
         - op-panel <unfixed> (embed)  
         - ebug-http <unfixed> (embed)  
737          - phpgedview <removed> (embed)          - phpgedview <removed> (embed)
738          - poker-network <unfixed> (embed)          - poker-network <removed> (embed; bug #555238)
739          NOTE: poker-web          - rails 2.1.0-6 (embed)
740          - webhelpers <unfixed> (embed)          - wordpress 2.5.0-2 (embed; bug #555243)
741          NOTE: python-webhelpers          - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
742          - qwik <unfixed> (embed)          TODO: search through all of the other zope packages
         - rails <unfixed> (embed)  
         - typo3-src <unfixed> (embed)  
         - wordpress 2.5.0-2 (embed)  
         - zope <unfixed> (embed)  
         NOTE: zope-plone3  
         - smokeping <unfixed> (embed)  
743          - ampache 3.4.1-2 (embed)          - ampache 3.4.1-2 (embed)
744          - exaile <unfixed> (embed)          - exaile 0.2.14+debian-2.1 (embed; bug #555245)
745          - hobix <unfixed> (embed)          - hobix 0.5~svn20070319-4 (embed; bug #555247)
746          - pixelpost <unfixed> (embed)          - zabbix 1.6.6-4 (embed; bug #555250)
747          - symfony <unfixed> (embed)          - chora2 <unfixed> (embed; bug #555253)
748          NOTE: it's been said that there are custom changes          - gollem <unfixed> (embed; bug # 555254)
749          - zabbix <unfixed> (embed)          - jscropperui 1.2.1-1 (embed; bug #555257)
750          NOTE: zabbix-frontend-php          - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
751          - turba2 <unfixed> (embed)          - ingo1 <unfixed> (embed; bug #555261)
752            - kronolith2 <unfixed> (embed; bug #555262)
753            - activeldap <unfixed> (embed)
754            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
755            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
756            - otrs2 2.3.4-6 (embed; bug #555267)
757            - webcalendar <unfixed> (embed; bug #555269)
758            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
759            - jifty 0.90519-1 (embed; bug #555271)
760            - jquery 1.4-1 (embed; bug #555272)
761            - passenger 2.2.5debian1-1 (embed; bug #555273)
762            - plone3 <removed> (embed; bug #555275)
763            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
764            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
765            - xulrunner <unfixed> (embed)
766            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
767    
768  gdb  gdb
769          - insight <unfixed> (embed)          - insight <unfixed> (embed)
# Line 702  java Line 786  java
786    
787  libphp-snoopy  libphp-snoopy
788          - ampache 3.4.1-2 (embed; bug #504169)          - ampache 3.4.1-2 (embed; bug #504169)
789            - gforge 4.6.99+svn6094-2 (embed)
790          - mahara 1.0.5-2 (embed; bug #504170)          - mahara 1.0.5-2 (embed; bug #504170)
791          - pixelpost 1.7.1-5 (embed; bug #504171)          - pixelpost 1.7.1-5 (embed; bug #504171)
792          - mediamate 0.9.3.6-5 (embed; bug #504172)          - mediamate 0.9.3.6-5 (embed; bug #504172)
# Line 742  magpierss Line 827  magpierss
827    
828  php-gettext  php-gettext
829          - wordpress 2.8.4-1 (embed; bug #504242)          - wordpress 2.8.4-1 (embed; bug #504242)
830            - docbookwiki <unfixed> (embed)
831            - knowledgeroot 0.9.9.5-1
832            NOTE: non-free
833    
834  libphp-ixr (name may change, it is the Incutio XML-RPC)  libphp-ixr (name may change, it is the Incutio XML-RPC)
835          - wordpress <unfixed> (embed; bug #504242)          - wordpress <unfixed> (embed; bug #504242)
# Line 753  libphp-cas Line 841  libphp-cas
841          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
842          - moodle <unfixed> (embed; bug #505984)          - moodle <unfixed> (embed; bug #505984)
843    
844  scriptaculous  scriptaculous (prototype.js is among the embeds in the following)
845          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
846          - libaws <unfixed> (embed)          - libaws <unfixed> (embed; bug #555222)
         NOTE: libaws-doc  
847          - op-panel <unfixed> (embed)          - op-panel <unfixed> (embed)
848          - symfony <unfixed> (embed)          - symfony <unfixed> (embed)
849          NOTE: maintainer says there are extra incompatible changes required          NOTE: maintainer says there are extra incompatible changes required
850          - pixelpost <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
851          - webhelpers <unfixed> (embed)          - webhelpers <unfixed> (embed)
852          NOTE: python-webhelpers          - qwik <removed> (embed; bug #555241)
         - qwik <unfixed> (embed)  
853          - smokeping <unfixed> (embed)          - smokeping <unfixed> (embed)
854          - turba2 <unfixed> (embed)          - turba2 <unfixed> (embed)
855          - typo3-src 4.2.3-1 (embed)          - typo3-src 4.2.3-1 (embed)
856            - request-tracker3.6 <unfixed> (embed)
857            - request-tracker3.8 <unfixed> (embed)
858            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
859            - wordpress 2.5.0-2 (embed)
860            - libhtml-prototype-perl 1.48-3 (embed)
861    
862  libmarkdown-php  libmarkdown-php
863          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
864          - pixelpost <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
865    
866  php-openid  php-openid
867          - wordpress-openid <itp> (embed)          - wordpress-openid <itp> (embed)
# Line 784  webcalendar Line 875  webcalendar
875          - gforge 4.7~rc2-6 (embed; bug #504758)          - gforge 4.7~rc2-6 (embed; bug #504758)
876    
877  libical  libical
878          - kdepim <unfixed> (fork)          - kdepim <unknown> (fork)
879          - kdepimlibs <unfixed> (fork)          NOTE: fixed at some point during 4.0
880          NOTE: fixed in KDE4 post 4.1.x series          - kdepimlibs 4.2.0-1 (fork)
881          - claws-mail-extra-plugins <unfixed> (fork)          - claws-mail-extra-plugins <unfixed> (fork)
882    
883  libltdl3  libltdl3
# Line 796  libltdl3 Line 887  libltdl3
887    
888  harfbuzz  harfbuzz
889          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
890            - pango1.0 <unfixed> (embed)
891            - fontmatrix <unfixed> (embed)
892    
893  libzip  libzip
894          - php5 <unfixed> (fork)          - php5 <unfixable> (modified-embed)
895          - odt2txt <unfixed> (embed; bug #523808)          - odt2txt <unfixed> (embed; bug #523808)
896    
897  json.php (not packaged; should be replaced with php's built-in functions)  json.php (not packaged; should be replaced with php's built-in functions)
# Line 853  libphp-pclzip Line 946  libphp-pclzip
946    
947  libphp-simplepie  libphp-simplepie
948          - dokuwiki <unfixed>          - dokuwiki <unfixed>
949            - wordpress <unfixed>
950    
951  libphp-jpgraph  libphp-jpgraph
952          - egroupware <unfixed>          - egroupware <unfixed>
# Line 867  libpng Line 961  libpng
961          - xulrunner 1.9.0.13-1 (embed)          - xulrunner 1.9.0.13-1 (embed)
962          [lenny] - xulrunner 1.9.0.11-0lenny1          [lenny] - xulrunner 1.9.0.11-0lenny1
963          [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)          [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
964            - gamera 3.2.3-1 (embed)
965    
966  irssi  irssi
967          - silc-client <unfixed> (embed)          - silc-client <unfixed> (embed)
# Line 884  libitext-java Line 979  libitext-java
979          - bouncycastle 2.1.4-1 (embed)          - bouncycastle 2.1.4-1 (embed)
980    
981  python-ply  python-ply
982          - pyke <unfixed> (embed)          - pyke <unfixed> (embed; bug #555363)
983            - pywbem 0.7.0-4 (embed; bug #555364)
984            - sepolgen <unfixed> (embed; bug #555365)
985            - zope-textindexng3 <unknown> (embed)
986            - iceweasel <not-affected> (uses xulrunner)
987            - xulrunner <unknown> (embed)
988            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
989    
990  libdumbnet (libdnet upstream)  libdumbnet (libdnet upstream)
991          - nmap <unfixed> (fork)          - nmap <unfixed> (fork)
# Line 893  gcc-4.4 Line 994  gcc-4.4
994          - gcc-mingw32 <unfixed> (embed)          - gcc-mingw32 <unfixed> (embed)
995    
996  camlimages  camlimages
997          - advi <unfixed> (embed)          - advi <unfixed> (static; bug #550441)
998    
999  memcached  memcached
1000          - memcachedb <unfixed> (embed)          - memcachedb <unfixed> (embed)
# Line 902  yajl Line 1003  yajl
1003          - argyll <unfixed> (embed; bug #544223)          - argyll <unfixed> (embed; bug #544223)
1004          NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html          NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1005    
1006    nusoap
1007            - gforge 4.8.2-1 (embed)
1008            - ampache <unfixed> (embed)
1009            - poker-network <unfixed> (old-version)
1010            - moodle <unfixed> (old-version)
1011            NOTE: code is not used when running under php5 and soap is enabled
1012            - phpwiki <unfixed> (old-version)
1013            - gallery2 <unfixed> (old-version)
1014            - typo3-src <unfixed> (old-version)
1015    
1016  libept  libept
1017          - adept <unfixed> (embed; bug #540649)          - adept <unfixed> (embed; bug #540649)
1018    
1019  libvorbis  libvorbis
1020          - iceweasel <not-affected> (uses xulrunner)          - iceweasel <not-affected> (uses xulrunner)
1021          - xulrunner <not-affected> (introduced in 1.9.1)          - xulrunner <unfixed> (embed; bug #540959)
1022          TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]          [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1023            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1024            - iceape <unfixed> (embed)
1025            [etch] - iceape <not-affected> (introduced in 2.0)
1026            [lenny] - iceape <not-affected> (introduced in 2.0)
1027    
1028  cairo  cairo
1029          - iceweasel <not-affected> (uses xulrunner)          - iceweasel <not-affected> (uses xulrunner)
1030          - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)          - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1031    
1032    liboggz
1033            - iceweasel <not-affected> (uses xulrunner)
1034            - xulrunner <unfixed> (embed; bug #540959)
1035            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1036            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1037            - iceape <unfixed> (embed)
1038            [etch] - iceape <not-affected> (introduced in 2.0)
1039            [lenny] - iceape <not-affected> (introduced in 2.0)
1040    
1041    liboggplay
1042            - iceweasel <not-affected> (uses xulrunner)
1043            - xulrunner <unfixed> (embed; bug #540959)
1044            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1045            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1046            - iceape <unfixed> (embed)
1047            [etch] - iceape <not-affected> (introduced in 2.0)
1048            [lenny] - iceape <not-affected> (introduced in 2.0)
1049    
1050  php-net-dnsbl  php-net-dnsbl
1051          - serendipity <unfixed> (embed)          - serendipity <unfixed> (embed; bug #541740)
1052    
1053  php-onyx-rss  php-onyx-rss
1054          - serendipity <unfixed> (embed)          - serendipity <unfixed> (embed; bug #541740)
1055    
1056  php-text-wiki  php-text-wiki
1057          - serendipity <unfixed> (embed)          - serendipity <unfixed> (embed; bug #541740)
1058    
1059  php-xml-rpc  php-xml-rpc
1060          - serendipity <unfixed> (embed)          - serendipity <unfixed> (embed; bug #541740)
1061    
1062  polarssl (does not have a shared library)  polarssl (does not have a shared library)
1063          - pdkim <itp> (embed; bug #543150)          - pdkim <itp> (embed; bug #543150)
1064          - xyssl <old-version>          - xyssl <unfixed> (old-version)
1065    
1066  pidgin  pidgin
1067          - gaim <old-version>          - gaim <removed> (old-version)
1068            - qutecom <unfixed> (embed; bug #559785)
1069    
1070  icu  icu
1071          - webkit 1.0.1-1 (embed; bug #547214)          - webkit 1.0.1-1 (embed; bug #547214)
# Line 941  icu Line 1075  icu
1075  cyrus-imapd-2.2  cyrus-imapd-2.2
1076          - kolab-cyrus-imapd <unfixed> (fork)          - kolab-cyrus-imapd <unfixed> (fork)
1077          - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]          - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1078    
1079    python-cxx-dev
1080            - freecad 0.9.2646.3-1 (embed; bug #547936)
1081    
1082    zipios++
1083            - freecad 0.9.2646.3-1 (embed; bug #547941)
1084            - enigma 0.92.3-3 (embed)
1085            NOTE: likely fixed earlier, marking etch's version as fixed
1086    
1087    linux-2.6
1088            - kvm <removed> (embed; bug #549973) [./kernel/*]
1089            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1090            - kernel-source-2.6.8 <removed> (old-version)
1091            - kernel-source-2.4.27 <removed> (old-version)
1092            - kernel-source-2.4.24 <removed> (old-version)
1093            - kernel-source-2.2.25 <removed> (old-version)
1094            - kernel-source-2.2.20 <removed> (old-version)
1095    
1096    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1097            - kvm <removed> (embed) [./libfdt/*]
1098            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1099    
1100    qweb (not packaged)
1101            - ajaxterm <unfixed>
1102    
1103    opensaml2
1104            - opensaml <removed> (old-version)
1105    
1106    shibboleth-sp2
1107            - shibboleth-sp <removed> (old-version)
1108    
1109    tuxonice-userui
1110            - suspend2-userui <removed> (old-version)
1111    
1112    expat
1113            - w3c-libwww <removed> (embed; bug #551941)
1114            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1115            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1116            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1117            - python2.4 <unfixable> (embed; bug #553403)
1118            - python-4suite <unfixed> (embed; bug #516935)
1119            - wxwindows2.4 <removed> (embed)
1120            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1121            - wxwidgets2.8 2.8.10.1-2 (embed)
1122            - celementtree 1.0.5-8 (embed)
1123            NOTE: Maybe that was fixed even earlier
1124            - audacity 1.3.2-1 (embed)
1125            - matanza <unfixed> (embed)
1126            - tdom 0.8.3~20080525-1 (embed)
1127            - udunits 2.1.8-4 (embed)
1128            - apr-util 1.2 (embed)
1129            - ayttm <unfxed> (embed; bug #561006)
1130            - cableswig <unfixed> (embed)
1131            - cadaver <unfixed> (embed)
1132            - cmake 2.6.0-6 (embed)
1133            - coin3 <unfixed> (embed)
1134            - gdcm 2.0.14-2 (embed)
1135            - ghostscript <unfixed> (embed)
1136            - grmonitor <removed> (embed)
1137            - iceape <unfixed> (embed)
1138            - insighttoolkit 3.16.0-1 (embed)
1139            NOTE: insighttoolkit might've been fixed earlier
1140            - libparagui1.1 1.0.2-1 (embed)
1141            - paraview <unfixed> (embed)
1142            - poco <unfixed> (embed)
1143            - simgear <unfixed> (embed)
1144            - sitecopy 1:0.16.0-1
1145            - smart 1.0-1 (embed)
1146            - swish-e <not-affected> (Linked against libxml, which is used instead)
1147            - tla 1.3.5+dfsg-15 (embed)
1148            - vtk 4.1.20030227-1 (embed)
1149            - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1150            - xmlrpc-c <unfixed> (embed)
1151            - iceweasel <unfixed> (embed)
1152            - kompozer <unfixed> (embed)
1153            - vxl 1.13.0-2 (embed)
1154            - xulrunner <unfixed> (embed)
1155            - apache2 2.2 (embed)
1156            - texlive-bin <not-affected> (Embedded code not compiled in)
1157            - vnc4 <unfixed> (embed)
1158            - xotcl <unfixed> (embed)
1159    
1160    xerces-c
1161            - xerces-c2 <unfixed> (old-version)
1162            - xerces27 <removed> (old-version)
1163    
1164    md5 (RSA's version; not the gnu version provided by coreutils)
1165            - w3c-libwww <removed> (embed; bug #551942)
1166            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1167    
1168    libparagui1.1
1169            - asc <unfixable> (fork)
1170    
1171    enet
1172            - sauerbraten <unfixed> (embed; #497194)
1173    
1174    eglibc
1175            - glibc <removed> (old-version)
1176    
1177    galib
1178            - gamera 3.2.3-1 (embed)
1179    
1180    configobj
1181            - bzr <unfixed> (embed; bug #555336)
1182            - elisa <unfixed> (embed; bug #555337)
1183            - gaupol <unfixed> (embed; bug #555338)
1184            - ipython <unfixed> (embed; bug #555339)
1185            - pida <unfixed> (embed; bug #555340)
1186            - psychopy <unfixed> (embed; bug #555341)
1187            - rest2web <unfixed> (embed; bug #555342)
1188            - auth2db <unknown> (embed)
1189            - dynagen <unknown> (embed)
1190            - iceweasel <unknown> (embed)
1191            - sabnzbdplus <unknown> (embed)
1192            - xulrunner <unknown> (embed)
1193            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1194    
1195    python-clientform
1196            - bibus <unfixed> (embed; bug #555332)
1197            - zope2.10 <unfixed> (embed; bug #555333)
1198            - zope2.11 <removed> (embed; bug #555334)
1199            - python-mechanize <unknown> (embed)
1200            - twill <unknown> (embed)
1201    
1202    python-mechanize
1203            - zope2.10 <unfixed> (embed; bug #555337)
1204            - zope2.11 <removed> (embed; bug #555338)
1205            - twill <unknown> (embed; bug #555339)
1206    
1207    pexpect
1208            - duplicity 0.6.06-1 (embed; bug #555361)
1209            - hplip <unfixed> (embed; bug #555362)
1210            - smart <unfixed> (embed; bug #555363)
1211    
1212    pyparsing
1213            - bauble <unfixed> (embed; bug #555366)
1214            - boa-constructor 0.6.1-8 (embed; bug #555367)
1215            - calibre <unfixed> (embed; bug #555368)
1216            - matplotlib <unfixed> (embed; bug #531024)
1217            - zhpy 1.7.3.1-1 (embed; bug #555370)
1218            - polybori <unknown> (embed)
1219            - python-whoosh <unknown> (embed)
1220            - twill <unknown> (embed)
1221            - zope-textindexng3 <unknown> (embed)
1222    
1223    python-pysqlite2
1224            - python2.4 <unfixed> (embed; bug #553403)
1225            - python2.5 <unfixed> (embed; bug #553403)
1226    
1227    celementtree
1228            - python2.5 <unfixed> (embed)
1229            - smart 1.0-1 (embed)
1230            [etch] - smart <unfixed> (embed)
1231    
1232    elementtree
1233            - python2.5 <unfixed> (embed)
1234            - bzr <unfixed> (embed; bug #555343)
1235            - gedit 2.28.2-1 (embed; bug #555344)
1236            - smart 1.0-1 (embed)
1237            [etch] - smart <unfixed> (embed)
1238            - solfege <unfixed> (embed; bug #555345)
1239            - w3af <unfixed> (embed; bug #555346)
1240            - python-qt4 <unknown> (embed)
1241            - sphinx <unknown> (embed)
1242            - python-nltk <itp> (embed)
1243    
1244    python2.5
1245            - python2.4 <unfixed> (old-version)
1246            - jython <unfixed> (embed)
1247            NOTE: embeds many stdlib modules
1248            - python-django <unfixed> (embed; bug #555419)
1249            NOTE: embeds stdlib modules: doctest, decimal
1250            - gamera 3.2.3-1 (embed)
1251            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1252            - boa-constructor <unfixed> (embed; bug #555426)
1253            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1254            - nicotine <unfixed> (embed; bug #555427)
1255            NOTE: embeds stdlib modules: ConfigParser
1256            - museek+ <unfixed> (embed; bug #555428)
1257            NOTE: embeds stdlib modules: ConfigParser
1258            - vegastrike-data <unfixed> (embed)
1259            NOTE: embeds many stdlib modules
1260            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1261            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1262            - config-manager <unfixed> (embed; bug #555423)
1263            NOTE: embeds stdlib modules: optparse
1264            - jhbuild 2.28.0-1 (embed; bug #555421)
1265            NOTE: embeds stdlib modules: optparse, subprocess
1266            - smart <unfixed> (embed; bug #555432)
1267            NOTE: embeds stdlib modules: optparse
1268            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1269            NOTE: embeds stdlib modules: doctest
1270            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1271            NOTE: embeds stdlib modules: doctest
1272            - distribute <unfixed> (embed)
1273            NOTE: embeds stdlib modules: doctest
1274            - python-setuptools <unfixed> (embed; bug #555435)
1275            NOTE: embeds stdlib modules: doctest
1276            - zope.testing <unfixed> (embed; bug #555436)
1277            NOTE: embeds stdlib modules: doctest
1278            - translate-toolkit <unfixed> (embed; bug #555422)
1279            NOTE: embeds stdlib modules: textwrap, contextlib
1280            - libtpclient-py <unfixed> (embed; bug #555424)
1281            NOTE: embeds stdlib modules: subprocess
1282            - grass <unfixed> (embed; bug #555425)
1283            NOTE: embeds stdlib modules: subprocess
1284            - coherence <unfixed> (embed; bug #555429)
1285            NOTE: embeds stdlib modules: uuid
1286            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1287            NOTE: embeds stdlib modules: uuid
1288            - setroubleshoot <unfixed> (embed; bug #555431)
1289            NOTE: embeds stdlib modules: uuid
1290            - linkchecker <unfixed> (embed; bug #555414)
1291            NOTE: embeds msgfmt.py script
1292            - imdbpy <unfixed> (embed)
1293            NOTE: embeds msgfmt.py script
1294            - kiwi <unfixed> (embed)
1295            NOTE: embeds msgfmt.py script
1296            - moin <unfixed> (embed)
1297            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1298            - plone3 <removed> (embed)
1299            NOTE: embeds msgfmt.py script
1300            - roundup <unfixed> (embed)
1301            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1302            - rednotebook <unfixed> (embed; bug #555415)
1303            NOTE: embeds msgfmt.py script
1304            - turbogears <unfixed> (embed)
1305            NOTE: embeds msgfmt.py script
1306            - elisa <unfixed> (embed)
1307            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1308            - calibre <unfixed> (embed)
1309            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1310            - mailman 1:2.1.13-1 (embed; #555416)
1311            NOTE: embeds msgfmt.py script
1312            - python-docutils <unknown> (embed)
1313            NOTE: embeds stdlib modules: optparse, textwrap
1314            - python-imaging <unknown> (embed)
1315            NOTE: embeds stdlib modules: doctest
1316            - python-mechanize <unknown> (embed)
1317            NOTE: embeds stdlib modules: doctest
1318            - twill <unknown> (embed)
1319            NOTE: embeds stdlib modules: subprocess
1320            - zeroc-ice <unknown> (embed)
1321            NOTE: embeds stdlib modules: subprocess
1322            - wxwidgets2.8 <unknown> (embed)
1323            NOTE: embeds stdlib modules: subprocess
1324            - cycle <unknown> (embed)
1325            NOTE: embeds msgfmt.py script
1326            - deluge <unknown> (embed)
1327            NOTE: embeds msgfmt.py script
1328            - opendict <unknown> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - openerp-client <unknown> (embed)
1331            NOTE: embeds msgfmt.py script
1332            - rapidsvn <unknown> (embed)
1333            NOTE: embeds msgfmt.py script
1334            - wammu <unknown> (embed)
1335            NOTE: embeds msgfmt.py script
1336            - gaphor <unknown> (embed)
1337            NOTE: embeds msgfmt.py script
1338            - pida <unknown> (embed)
1339            NOTE: embeds msgfmt.py script
1340            - python-formencode <unknown> (embed)
1341            NOTE: embeds msgfmt.py script
1342            - duplicity <unfixed> (embed)
1343            NOTE: embeds stdlib module: urlparse, tarfile
1344            - pygopherd <unfixed> (embed)
1345            NOTE: embeds stdlib module: zipfile
1346    
1347    argparse
1348            - twill <unfixed> (embed; bug #555347)
1349            - ipython <unfixed> (embed; bug #555348)
1350    
1351    coherence
1352            - elisa <unfixed> (embed; bug #555335)
1353    
1354    simpletal
1355            - plastex <unfixed> (embed; bug #555371)
1356    
1357    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1358            - postr <unfixed> (embed)
1359            - elisa <unfixed> (embed)
1360    
1361    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1362            - apertium-tolk <unfixed> (embed)
1363            - ipython <unfixed> (embed)
1364            - virtaal <unfixed> (embed)
1365    
1366    distribute
1367            - setuptools <removed> (old-version)
1368    
1369    rails
1370            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1371            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1372            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1373            - thin <unfixed> (embed) [./spec/rails_app/*]
1374            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1375            NOTE: be dangerous if developers are naively basing their code off of the examples
1376            NOTE: prototype.js is among the example files
1377    
1378    lucene2 (prototype.js is among the embeds in the following)
1379            - lucene <unfixed> (old-version)
1380            - pylucene <unfixed> (embed)
1381            - libpdfbox-java <unfixed> (embed)
1382            - libfontbox-java <unfixed> (embed)
1383            - libjempbox-java <unfixed> (embed)
1384            - solr <unfixed> (embed)
1385    
1386    unicode-data
1387            - syslinux <unfixed> (embed)
1388            - camomile <unfixed> (embed)
1389            - fribidi <unfixed> (embed)
1390            - m17n-db <unfixed> (embed)
1391            - sbcl <unfixed> (embed)
1392            - heimdal <unfixed> (embed)
1393            - icu <unfixed> (embed)
1394            - icu4j <unfixed> (embed)
1395            - krb5 <unfixed> (embed)
1396            - moodle <unfixed> (embed)
1397            - openldap <unfixed> (embed)
1398            - pike7.6 <unfixed> (embed)
1399            - samba <unfixed> (embed)
1400            - samba4 <unfixed> (embed)
1401            - cmucl <unfixed> (embed)
1402            - typo3-src <unfixed> (embed)
1403            - mauve <unfixed> (embed)
1404            - texlive-bin <unfixed> (embed)
1405            - ypsilon <unfixed> (embed)
1406            - jeuclid <unfixed> (embed)
1407            - charmap.app <unfixed> (embed)
1408            - clisp <unfixed> (embed)
1409            - gnulib <unfixed> (embed)
1410            - opensrs-client <unfixed> (embed)
1411            - saxonb <unfixed> (embed)
1412            - rails <unfixed> (embed)
1413    
1414    feedparser
1415            - rawdog <unfixed> (embed; bug #383422)
1416            - miro <unfixed> (embed; bug #555351)
1417            - calibre <unfixed> (embed; bug #555352)
1418            - freevo <unfixed> (embed; bug #555353)
1419            - pida <unfixed> (embed; bug #555354)
1420            - planet-venus <unfixed> (embed; bug #555355)
1421            - plone3 <removed> (embed; bug #555356)
1422            - exaile 0.2.14+debian-1 (embed)
1423            - screenlets 0.1.2-3 (embed)
1424            NOTE: included twice
1425    
1426    agg:
1427            - matplotlib <unfixed> (embed: bug #377271)
1428            - contextfree <unfixed> (embed)
1429            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1430            - exactimage <unfixed> (embed)
1431            - python-enable <unfixed> (embed)
1432            - mapnik 0.5.1-3 (embed)
1433            NOTE: links statically to agg, but shared library is not available (bug #377271)
1434    
1435    vtk
1436            - paraview <unfixable> (embed; bug #495426)
1437    
1438    txt2tags
1439            - rednotebook <unfixed> (embed)
1440    
1441    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1442            - gajim <unfixed> (embed)
1443            - emesene <unfixed> (embed)
1444            - convirt <unfixed> (embed)
1445            - pida <unfixed> (embed)
1446            - rednotebook <unfixed> (embed)
1447    
1448    horde3 (prototype.js is among the embeds in the following)
1449            - mnemo2 <unfixed> (embed)
1450            - nag2 <unfixed> (embed)
1451            - wordpress <unfixed> (embed)
1452            NOTE: Text_Diff (wp-includes/Text/Diff*)
1453    
1454    cimg
1455            - gmic <itp> (embed)
1456    
1457    mootools
1458            - gmic <itp> (embed)
1459    
1460    openldap
1461            - openldap2.3 <removed> (old-version)
1462    
1463    grub2
1464            - grub <unfixed> (old-version)
1465    
1466    gnupginterface
1467            - duplicity <unfixed> (embed)
1468    
1469    python-dateutil
1470            - awn-extras-applets <unfixed> (embed)
1471            - matplotlib <unknown> (embed)
1472    
1473    cups
1474            - cupsys <removed> (old-version)
1475    
1476    yui
1477            - bcfg2 <not-affected> (present in source but not included in any binary files)
1478            - serendipity <unfixed> (embed; bug #557746)
1479            - moodle 1.8.2.dfsg-5 (embed)
1480            - jifty 0.91117-1 (embed; bug #557748)
1481            - webgui 7.7.26-1 (embed)
1482            - loggerhead 1.17-1 (embed)
1483    
1484    quake3 (vanilla source not packaged in debian)
1485            - openarena <unfixable> (fork)
1486    
1487    quake2 (vanilla source not packaged in debian)
1488            - alien-arena <unfixable> (fork)
1489            - warsow <unfixable> (fork)
1490    
1491    libtheora
1492            - iceweasel <not-affected> (uses xulrunner)
1493            - xulrunner <unfixed> (embed; bug #540959)
1494            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1495            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1496            - iceape <unfixed> (embed; bug #559276)
1497            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1498            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1499    
1500    dtoa
1501            - bfilter <unfixed> (embed)
1502            - cacao <unfixed> (embed)
1503            - cdrdao <unfixed> (embed)
1504            - classpath <unfixed> (embed)
1505            - freej <unfixed> (embed)
1506            - iceape <unfixed> (embed)
1507            - iceweasel <unfixed> (embed)
1508            - jscoverage <unfixed> (embed)
1509            - kde4libs <unfixed> (embed)
1510            - kdelibs <unfixed> (embed)
1511            - kompozer <unfixed> (embed)
1512            - libv8 <unfixed> (embed)
1513            - mono <unfixed> (embed)
1514            - newlib <unfixed> (embed)
1515            - nspr <unfixed> (embed)
1516            - php5 <unfixed> (embed)
1517            - polyml <unfixed> (embed)
1518            - qt4-x11 <unfixed> (embed)
1519            - rhino <unfixed> (embed)
1520            NOTE: code translated to Java
1521            - ruby1.8 <unfixed> (embed)
1522            - ruby1.9 <unfixed> (embed)
1523            - ruby1.9.1 <unfixed> (embed)
1524            - sdd <unfixed> (embed)
1525            - sfind <unfixed> (embed)
1526            - star <unfixed> (embed)
1527            - tinymux <unfixed> (embed)
1528            - virtualbox-ose <unfixed> (embed)
1529            - webkit <unfixed> (embed)
1530            - xulrunner <unfixed> (embed)
1531    
1532    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1533            - firegpg <unfixed> (embed)
1534            - enigmail <unfixed> (embed)
1535    
1536    ptmalloc (not packaged in Debian)
1537            - crystalspace <unfixed> (embed)
1538            - qt4-x11 <unfixed> (embed)
1539    
1540    svgalib
1541            - usplash <unfixed> (embed)
1542    
1543    bogl
1544            - usplash <unfixed> (embed)
1545    
1546    taglist
1547            - usplash <unfixed> (embed)
1548    
1549    portaudio
1550            - audacity <unfixed> (embed; bug #323711)
1551    
1552    nyquist
1553            - audacity <unfixed> (embed)
1554            NOTE: embeds a forked nyquist with support for a shared library
1555    
1556    vamp-plugin-sdk
1557            - audacity <unfixed> (embed)
1558    
1559    wordpress
1560            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1561    
1562    php5
1563            - php4 <removed> (old-version)
1564    
1565    classpath
1566            - libgnucrypto-java <unfixed> (embed; bug #559788)
1567    
1568    libtool
1569            - apr <unfixed> (static; bug #489625)
1570            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1571            - arts <unfixed> (embed)
1572            - bochs 2.4.2-1 (embed; bug #560884)
1573            - camserv <unfixed> (embed)
1574            - collectd <unfixed> (embed)
1575            - courier-authlib 0.58-4 (embed)
1576            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1577            - cvsnt <unfixed> (embed)
1578            - dico <not-affected> (Uses the system copy of ltdl)
1579            - freeradius 0.1+20010527-1 (embed)
1580            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1581            - ggobi 2.1.9~20091212-1 (embed)
1582            - glame 2.0.1-4 (embed)
1583            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1584            - gnash <unfixed> (embed)
1585            - gnu-smalltalk <unfixed> (embed)
1586            - google-gadgets 0.10.5-0.3 (embed)
1587            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1588            - graphicsmagick 1.3.5-6 (embed)
1589            - graphviz 2.8-3 (embed)
1590            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1591            - guile-1.6 1.6.8-7 (embed)
1592            - hamlib <unfixed> (embed)
1593            - hercules <unfixed> (embed)
1594            - jags 1.0.4-3 (embed; bug #560864)
1595            - kdelibs <unfixed> (embed)
1596            - libannodex <removed> (embed)
1597            - libextractor <unfixed> (embed)
1598            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1599            - libtunepimp <unfixed> (embed)
1600            - mp4h <unfixed> (embed)
1601            - naim <unfixed> (embed)
1602            - parser-mysql <unfixed> (embed)
1603            - pinball 0.3.1-11 (embed)
1604            - redland <unfixed> (embed)
1605            - siproxd <unfixed> (embed)
1606            - ski <unfixed> (embed)
1607            - synfig <unfixed> (embed)
1608            - unixodbc 2.2.4-5 (embed)
1609            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1610            - clamav 0.95+dfsg-1 (embed)
1611            - imagemagick 6:6.2.3.1-1 (embed)
1612            - hypre 2.4.0b-5 (embed)
1613            - lam <unfixed> (embed)
1614            - openmpi <unfixable> (embed; bug #559386)
1615            - parser <unfixed> (embed)
1616            - pdsh 2.18-5 (embed; bug #560892)
1617            - sbnc 1.2-8 (embed)
1618            - sdcc <unfixed> (embed)
1619            - wml <unfixed> (embed)
1620            - proftpd-dfsg <unfixed> (embed; bug #561748)
1621            - babel 1.4.0.dfsg-5 (embed)
1622            - libprelude 0.9.14-2 (embed)
1623            - heartbeat 2.1.4-7 (embed)
1624            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1625            NOTE: might've been fixed earlier
1626            - gcc-* <unknown> (embed)
1627    
1628    ocamlgsl
1629            - orpie 1.5.1-7.1 (embed; bug #550058)
1630    
1631    xdotool
1632            - keynav <unfixed> (embed; bug #560103)
1633    
1634    bulletphysics (not packaged; http://www.bulletphysics.org/)
1635            - supertuxkart <unfixed> (embed)
1636            - blender <unfixed> (embed)
1637    
1638    ghostscript
1639            - gs-gpl <removed> (old-version)
1640    
1641    icedove
1642            - thunderbird <removed> (old-version)
1643    
1644    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1645            - jquery <unfixed> (embed)
1646    
1647    sed
1648            - ssed <unfixed> (fork)
1649    
1650    phpatomlib (http://code.google.com/p/phpatomlib)
1651            - wordpress <unfixed> (embed)
1652    
1653    Services_JSON (http://pear.php.net/package/Services_JSON)
1654            - wordpress <unfixed> (embed)
1655    
1656    phpass (http://www.openwall.com/phpass/)
1657            - gallery2 <unfixed> (embed)
1658            - wordpress <unfixed> (embed)
1659            - typo3-src <unfixed> (fork)
1660            NOTE: file refers to drupal, maybe there's a copy somewhere there
1661            NOTE: a copyright owner search didn't match anything
1662            - libauthen-passphrase-perl <unfixable> (fork)
1663            NOTE: perl implementation of phpass
1664    
1665    squirrelmail
1666            - wordpress <unfixed> (embed)
1667            NOTE: class-pop3.php
1668    
1669    ezSQL (http://www.woyano.com/jv/ezsql)
1670            - wordpress <unfixable> (fork)
1671            NOTE: wp-db.php
1672    
1673    Diff.php (Clay Loveless' version/killersoft.com)
1674            - php-versioncontrol-svn <unfixed>
1675    
1676    libm
1677            - spring <unfixed> (embed)
1678            NOTE: embedded by embedded copy of streflop
1679    
1680    streflop
1681            - spring <unfixed> (embed)
1682    
1683    minizip
1684            - spring <unfixed> (embed)
1685    
1686    oscpack
1687            - spring <unfixed> (embed)
1688    
1689    hpiutil2
1690            - spring <unfixed> (embed)
1691    
1692    p7zip
1693            - spring <unfixed> (embed)
1694    
1695    pythonqt (doesn't seem to be python-qtN, unknown source)
1696            - fontmatrix <unfixed> (embed)
1697            - elmerfem <unfixed> (embed)
1698    
1699    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1700            - docvert <unfixed> (embed)
1701            - jifty <unfixed> (embed)
1702            - kdenetwork <unfixed> (embed)
1703            - mediatomb <unfixed> (embed)
1704            - plastex <unfixed> (embed)
1705            - plone3 <removed> (embed)
1706            - python-chaco <unfixed> (embed)
1707            - python-docutils <unfixed> (embed)
1708            - s5 <unfixed> (embed)
1709            - zope2.10 <unfixed> (embed)
1710            - zope2.11 <removed> (embed)
1711            - cython <not-affcted> (embed)
1712            NOTE: part of documentation, which is not installed into the binary package
1713    
1714    python-docutils
1715            - zope2.10 <unfixed> (embed)
1716            - zope2.11 <removed> (embed)
1717    
1718    tesseract
1719            - ocropus <unfixed> (static)
1720    
1721    antlr
1722            - kdevelop <unfixed> (embed)

Legend:
Removed from v.12864  
changed lines
  Added in v.13845

  ViewVC Help
Powered by ViewVC 1.1.5