/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 5564 by alec-guest, Wed Mar 21 01:24:37 2007 UTC revision 13242 by gilbert-guest, Mon Nov 9 03:13:14 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (will be replaced by evince in Gnome 2.12)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (current poppler source package has a ported version, pinged maintainer)  to be applied in multiple source packages.
7  kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, probably not in time for Etch)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)          be determined, or <unfixable> for unavoidable cases (e.g., forks
16  dpkg          that add real value)
17  rsync (somehow derived code base)  sort: static (linking statically against a lib)
18  mozilla(?)        embed (embedding a copy of the library into another source package)
19  Linux kernels        fork (the package is not just embedding code but it is a fork and
20  pvpgn (links dynamically since 1.7.8-2)              thus might share parts of the source code)
21  mrtg (links dynamically since 2.12.2-1)        old-version (the package is an older version of essentially
22  rpm                     the same code)
23    
24  libbz2:  The srcpkg might be some string to identify the code if there is no
25  dpkg (statically linked)  specific source package.
26    
27  libgadu/ekg:  Everything up to the next line is ignored.
28  centericq  ---BEGIN
29  gaim  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30  kopete (ships the code, but links dynamically in the Debian package)          NOTE: Fixed packages link to poppler library unless otherwise noted
31  kadu (not packaged in Debian)          - pdftohtml <unknown>
32  GNU gadu (not yet packaged in Debian)          [sarge] - pdftohtml <unfixed>
33            [etch] - pdftohtml <unfixed>
34  xmlrpc: (which package is the "origin" of this code?)          NOTE: has been replaced by poppler-utils
35  drupal          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36  phpgroupware          - texlive-base 3.0-12 (embed)
37  egroupware          - texlive-bin 2007-1 (embed)
38  phpwiki          NOTE: links to poppler
39  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - koffice <unfixed> (embed; bug #436163)
40  tikiwiki          - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42  shtool: (affects build-time only)          - ipe <unfixed> (embed)
43  mysql-ocaml          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44  php4          - ruby-gnome2 <unknown> (embed)
45            NOTE: copy only present in source but links to poppler
46  mozilla:          - pdfedit <unfixed> (embed; bug #510794)
47  mozilla-firefox          - swftools <unfixed> (embed; bug #551293)
48  mozilla-thunderbird          - poppler <unfixable> (fork)
49  firefox (to be removed)  
50  thunderbird (to be removed)  ppmd
51  iceweasel          - libcomplearn-mod-ppmd <unfixed> (fork)
52  iceape          NOTE: discussion in #458152
53  icedove  
54  xulrunner  libevent
55  nvu (no longer in Debian)          - transmission 1.71-1 (embed; bug #529372)
56    
57  xli:  lrmi
58  xloadimage          - read-edid 2.0.0-1 (embed; bug #495131)
59    
60  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  peercast
61  openmotif          - gnome-peercast <removed> (embed)
62  xfree86/xorg (in libxpm)          [etch] - gnome-peercast <unfixed> (embed)
63    
64  kerberized apps with BSD origin:  silc-toolkit
65  krb4          - silc-client 1.1~beta6-1 (embed)
66  krb5  
67  heimdal  icclib
68            - ghostscript <unfixed> (embed)
69  grip: (which pkg is the origin?)          - argyll <unfixed> (embed)
70  libcdaudio  
71  grip  dietlibc
72  gnome-vfs (vfs2 as well?)          - ccontrol 0.9.1+20071204-1 (static)
73    
74  fudforum:  libmikmod
75  phpgroupware-fudforum          - sdl-mixer1.2 <unfixed> (embed)
76  egroupware-fudforum (removed from egroupware after sarge)          TODO: report bug
77    
78  cvs:  libiax
79  gcvs (at least an additional script is included, check if there's more)          - iaxmodem <unfixable> (embed; bug #548885)
80    
81  pcre:  spandsp
82  all pythons          - iaxmodem <unfixable> (embed; bug #548885)
83  php4 (src included, but Debian package links dynamically)  
84  analog (src included, but Debian package links dynamically)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85  libgoffice-1          - dpkg <unfixed> (embed)
86  tf5 (since 5.0beta7 the Debian package links dynamically)          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87            - rsync <unfixed> (embed)
88  tiff:          NOTE: somehow derived code base
89  wxpythongtk (check, which debian pkg this is in)          - mono <unfixed> (embed)
90  older kdegraphics/kpdf releases < 3.3 embedded a copy          TODO: check mozilla
91            - Linux kernels <unfixed> (embed)
92  uudeview:          - pvpgn 1.7.8-2 (embed)
93  libconvert-uulib-perl          - mrtg 2.12.2-1 (embed)
94            - rpm <unknown> (embed)
95  sqlite: (not affected by security vulnerabilities so far)          NOTE: pinged anibal since when rpm was fixed
96  amarok          - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98  util-linux/mount:          - tra <unfixed>
99  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - sash <unfixed>
100            - nsis <unfixed>
101  webmin:          - mseide-msegui <unfixed>
102  usermin (only in sarge)          NOTE: mseide
103            - mirrordir <unfixed>
104  sylpheed:          - poco <unfixed>
105  sylpheed-claws          - klibc <unfixed>
106            - ghostscript <unfixed>
107  phpsysinfo:          - freeimage <unfixed>
108  egroupware          - clamav <unfixed> (fork)
109  phpgroupware          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111  phpldapadmin:          - plt-scheme <unfixed>
112  egroupware (removed from egroupware after sarge)          - perl <unfixed>
113            - paraview <unfixed>
114  chmlib:          - gcvs <unfixed>
115  kchmviewer (not packaged in Debian)          - dump <unfixed>
116            - aide <unfixed> (static)
117  libavcodec/libavformat:          - dar <unfixed> (static)
118  ffmpeg          - avfs <unfixed>
119  xine-lib          - fpc <unfixed>
120  xvidcap          - winff <unfixed>
121  kino (links statically, does not include code)          NOTE: inherited from fpc, see #472304
122  vlc (links statically, does not include code)          - lazarus <unfixed>
123  smilutils (links statically, does not include code)          NOTE: inherited from fpc, see #472304
124  motion (links statically, does not include code)          - erlang <unfixed> (embed)
125  gst-ffmpeg          - gamera 3.2.3-1 (embed)
126  gstreamer0.10-ffmpeg          - python2.4 <unfixed> (embed; bug #553403)
127  xmovie          - python2.5 <unfixed> (embed; bug #553403)
128    
129    dulwich
130            - hg-git 0.1.0-1 (embed; bug #541996)
131    
132    libvigraimpex
133            - hugin <unfixed> (embed; bug #542259)
134            - enblend-enfuse <unfixed> (embed; bug #542258)
135            - gamera 3.2.3-1 (embed)
136    
137    libbz2
138            - dpkg <unfixed> (static)
139    
140    libgadu
141            - centericq <unfixed> (embed)
142            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144            - kdenetwork 4:3.3.2-5 (embed)
145            NOTE: from kdenetwork: kopete
146            - ekg 1:1.8~rc0-1 (embed)
147            - kadu 0.6.0.2-3 (embed; bug #504430)
148            - gadu <itp> (embed)
149    
150    xmlrpc (which package is the "origin" of this code?)
151            - drupal <unfixed> (embed)
152            - phpgroupware <unfixed> (embed)
153            - egroupware <unfixed> (embed)
154            - phpwiki <unfixed> (embed)
155            - php4 <unfixed> (embed)
156            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157    
158    shtool (affects build-time only)
159            - mysql-ocaml <unfixed> (embed)
160            - php4 <unfixed> (embed)
161    
162  mad MPEG decoding lib:  iceape
163  mad          - iceweasel <unfixed> (fork)
164  xine-lib          - icedove <unfixed> (fork)
165            - xulrunner <unfixed> (fork)
166            - kompozer <unfixed> (embed; bug #532168)
167    
168    xli
169            - xloadimage <unfixed> (embed)
170    
171    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
172            - openmotif <unfixed> (embed)
173            - libxpm <unfixed> (embed)
174    
175    kerberized apps with BSD origin
176            - krb4 <removed> (embed)
177            - krb5 <unfixed> (embed)
178            - heimdal <unfixed> (embed)
179    
180    grip (which pkg is the origin?)
181            - libcdaudio <unfixed>
182            - grip <unfixed>
183            - gnome-vfs <unfixed>
184            TODO: check vfs2 as well
185    
186    fudforum
187            [etch] - phpgroupware <unfixed> (embed)
188            NOTE: phpgroupware-fudforum
189            [sarge] - egroupware-fudforum <removed> (embed)
190    
191    libbsd
192            - rdate 1:1.2-3 (embed)
193            - atheme-services <unfixed>
194            - libbsd-arc4random-perl <unfixed>
195            - isakmpd <unfixed>
196    
197    cvs
198            - gcvs <unfixed> (embed)
199            NOTE: see cvsunix/src in tarball
200    
201    pcre3
202            - php4 <unknown> (embed)
203            - analog 2:5.23-0woody1 (embed)
204            - goffice <unfixed> (embed)
205            NOTE: libgoffice-*
206            - vfu 4.06-4.1 (embed; bug #450754)
207            - tf5 5.0beta7-1 (embed)
208            - monotone 0.43-1 (embed)
209            NOTE: this only affects versions >= 0.37
210            - glib2.0 2.15.2-1 (embed)
211            - apache2 2.0.53-4 (embed)
212            - exim4 4.10-0.srh20.12 (embed)
213            - yacas <unfixed> (embed)
214            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
215            - gtamsanalyzer.app 0.42-5 (embed)
216            - tin 980117-1 (embed)
217            - kazehakase 0.5.2-1
218            - webkit 1.0.1-1 (embed)
219            - qt4-x11 <unfixed> (embed)
220            NOTE: embedded via webkit copy
221            - erlang <unfixed> (embed)
222    
223    tiff
224            - wxwindows2.4 2.2.1 (embed)
225            - gamera 3.2.3-1 (embed)
226    
227    uudeview
228            - libconvert-uulib-perl <unfixed> (embed)
229            - pan <unfixed> (embed)
230    
231    sqlite (not affected by security vulnerabilities so far)
232            - amarok <unfixed> (embed)
233            - monotone 0.43-1 (embed)
234            - iceweasel <unfixed> (embed)
235    
236    util-linux/mount
237            - loop-aes-utils <unfixed> (embed)
238            NOTE: contains code from util-linux' mount in the mount-aes-udeb
239    
240    sylpheed
241            - sylpheed-claws <unfixed> (fork)
242    
243    phpsysinfo
244            - egroupware <unfixed> (embed)
245            - phpgroupware <unfixed> (embed)
246    
247    phpldapadmin
248            [sarge] - egroupware <unfixed> (embed)
249            NOTE: removed from egroupware after sarge
250    
251    chmlib
252            - kchmviewer <unknown> (embed)
253    
254    ffmpeg (libavcodec/libavformat)
255            - mplayer 1.0~rc2-14 (embed; bug #395252)
256            - kino 1.0.0-1
257            - vlc <not-affected> (Links dynamically since initial release)
258            - smilutils 0.3.0-10
259            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
260            - motion 3.1.19-1
261            - gstreamer0.10-ffmpeg 0.10.3-2
262            - xmovie <removed> (static)
263            TODO: gimp-gap (potentially using ffmpeg code as well)
264            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
265    
266    faad2
267            - mplayer 1.0~rc2-20 (embed)
268            - avifile <unfixed> (embed; bug #538750)
269    
270    libmad (MPEG decoding lib)
271            - xine-lib <unfixed> (embed)
272            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
273            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
274    
 libdts:  
275  libdts  libdts
276  xine-lib          - xine-lib <unfixed> (embed)
277    
 flac:  
278  flac  flac
279  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
280    
281  curl:  liba52
282  wget (code for NTLM authentication)          - a52dec <unfixed> (embed)
283            - xine-lib <unfixed> (embed)
284    
285    libmpeg2
286            - mpeg2dec <unfixed> (embed)
287            - xine-lib <unfixed> (embed)
288    
289    libntlm
290            - wget <unfixed> (fork; bug #550436)
291            - curl <unfixed> (fork; bug #550437)
292            - cntlm <unfixed> (fork; bug #550438)
293    
294    uw-imap
295            - pine <unfixed> (embed)
296            - alpine <unfixed> (embed)
297    
298    imagemagick
299            - graphicsmagick <unfixed> (fork)
300    
301    python-urlgrabber
302            - mercurial <unfixed> (embed; bug #531062)
303            - w3af <unfixed> (embed)
304            [experimental] - harvestman <unfixed> (embed)
305    
306    beautifulsoup
307            - python-mechanize <unfixed> (embed)
308            - zope2.11 <unfixed> (embed)
309            - twill <unknown> (embed)
310    
311    halibut
312            - nsis <unfixed> (fork)
313    
314    libghttp
315            - hotway <unfixed> (embed)
316    
317    libsndfile
318            - ardour 1:2.7.1-1 (embed)
319    
320    glibmm2.4
321            - ardour 1:2.7.1-1 (embed)
322    
323    libgnomecanvasmm2.6
324            - ardour 1:2.7.1-1 (embed)
325    
326    libsigc++-2.0
327            - ardour 1:2.7.1-1 (embed)
328    
329    soundtouch
330            - ardour 1:2.7.1-1 (embed)
331    
332    libmms
333            - xine-lib <unfixed> (embed)
334            - mimms <unfixed> (embed)
335    
336    fckeditor
337            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
338            - moin 1.8.2-2 (embed; bug #452599)
339            - karrigell <removed> (embed; bug #452598)
340            - gforge 4.6.99+svn6225-1 (embed)
341            - request-tracker3.8 <unfixed> (embed)
342    
343    ipatlas (not packaged in Debian)
344            - moodle <unfixed> (embed; bug #507185)
345    
346    libphp-phpmailer
347            - moodle <unfixed> (embed; bug #507185)
348            - mahara <unfixed> (embed)
349            - symfony <unfixed> (embed)
350            [etch] - phpgroupware <unfixed> (embed)
351            NOTE: phpgroupware-felamimail is only in etch
352            - egroupware <unfixed> (embed; bug #504283)
353            - glpi <unfixed>
354    
355    htmlArea (not packaged in Debian)
356            - moodle <unfixed> (embed)
357    
358    giflib
359            - wine <unfixed> (embed; bug #466181)
360    
361    bennu (not packaged in Debian, http://bennu.sourceforge.net)
362            - moodle <unfixed> (embed)
363    
364    smarty
365            - moodle 1.8.2-2 (embed; bug #471158)
366            - gallery2 2.2.5-2 (embed; bug #471160)
367            - mahara 0.9.2-2 (embed; bug #471201)
368            - gosa 2.4beta1-1 (embed; bug #471200)
369    
370  TODO evaluate:  TinyMCE
371  gimp-gap (potentially using ffmpeg code as well)          - wordpress 2.5.1-3 (embed; bug #478257)
372            - moodle <unfixed> (embed; bug #507185)
373  uw-imap:          - knowledgeroot <unfixed> (embed)
374  pine          - joomla <itp> (bug #326398)
375    
376  imagemagick:  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
377  graphicsmagick          - scite <unfixed> (embed)
378            - qscintilla <unfixed> (embed)
379  halibut:          - qscintilla2 <unfixed> (embed)
380  nsis          - geany <unfixed> (fork)
381            - anjuta <unfixed> (embed)
382  libghttp:  
383  hotway  libphp-adodb
384            - moodle <unfixed> (embed; bug #507185)
385            NOTE: also AdoDB-XML Schema
386            - gallery2 <unfixed> (embed)
387            - phppgadmin <unfixed> (embed)
388            - egroupware <unfixed> (embed)
389            - phpwiki <unfixed> (embed)
390            - torrentflux 2.0beta1-2 (embed)
391            - ipplan <unfixed> (embed)
392            - typo3-src <unfixed> (embed)
393            - cacti <unknown> (embed)
394            [sarge] - cacti <unfixed> (embed)
395            NOTE: dependency exists, but internal version is used
396            - gforge 4.7~rc2-6 (embed)
397            - mahara <unfixed> (embed)
398    
399    gzip
400            - linux-kernel <unfixed> (embed)
401            NOTE: lib/inflate.c
402            - klibc <unfixed> (embed)
403            NOTE: based on linux-kernel gzip code
404            - busybox <unfixed> (embed)
405    
406    neon
407            - cadaver 0.22.3+debian-1 (embed; bug #188381)
408            - gnome-vfs2 <unfixed> (embed; bug #395874)
409            [etch] - litmus <unfixed> (embed; #395875)
410            - litmus <removed> (embed; #395875)
411            [sarge] - screem <unfixed> (embed)
412            - sitecopy 1:0.16.3-5 (embed; bug #395876)
413            [etch] - tla <unfixed> (embed; bug #395877)
414            [sarge] - tla <unfixed> (embed; bug #395877)
415    
416    libmodplug
417            - gst-plugins-bad0.10 <unfixed> (embed)
418    
419    libvncserver
420            - vino <unfixed> (embed)
421    
422    putty
423            - filezilla <unfixed> (embed)
424    
425    tinyxml (not packaged in Debian)
426            - filezilla <unfixed>
427    
428    gv
429            - evince <unfixed> (embed)
430            NOTE: ps/ tree from gv 3.5.8
431            NOTE: evince-gtk is affected (a component of evince source package)
432    
433    libXbae
434            - paw <removed> (embed)
435            [etch] - paw <unfixed> (embed)
436    
437    libgtkhtml
438            - claws-mail-extra-plugins <unfixed> (fork)
439    
440    libXaw
441            - paw <removed> (embed)
442            [etch] - paw <unfixed> (embed)
443            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
444    
445    libgd2
446            - graphviz <unfixed> (embed)
447            NOTE: lib/gd seems to be 2.0.33
448            - wml <unfixed> (embed)
449            - libwmf <unfixed> (embed)
450            NOTE: derived from gd 1.6.3
451    
452    rar
453            - unrar-nonfree <unfixed> (embed)
454    
455    unrar-free (maybe this code is derived from the original rar, too?)
456            - clamav <unfixed> (embed)
457            NOTE: seems to be disabled in default config
458    
459    mplayer (DirectMedia Object loader)
460            - xine-lib <unfixed> (embed)
461            NOTE: src/libw32dll/
462            - vlc <unfixed> (embed)
463            NOTE: modules/codec/dmo/
464            - mplayer 1.0~rc2-20 (embed)
465    
466    libwpd (WordPerfect converter)
467            - openoffice.org <unfixed> (embed)
468    
469    fsplib (http://sourceforge.net/projects/fsp/)
470            - gftp <unfixed> (embed)
471            NOTE: lib/fsplib version 0.3
472    
473    sprng
474            - tree-puzzle <unfixed> (embed)
475    
476    librpcsecgss
477            - krb5 <unfixed> (embed)
478    
479    jasper
480            - ghostscript <unfixed> (embed)
481            - gs-gpl <unfixed> (embed)
482    
483    libiris
484            - psi <unfixed> (embed)
485            - kdenetwork <unfixed> (embed)
486            NOTE: kopete embeds libiris but links dynamically to libidn
487            - kdegames <unfixed> (embed)
488            NOTE: ksirk/kde4
489    
490    libidn
491            - monotone 0.43-1 (embed)
492            - psi <unfixed> (embed)
493            NOTE: psi embeds libiris which embeds libidn
494            - kdegames <unfixed> (embed)
495            NOTE: kdegames/kde4 embeds libiris which embeds libidn
496    
497    liblua
498            - monotone 0.43-1 (embed)
499            - nmap 5.00-1 (embed; bug #527997)
500            [lenny] - nmap <unfixed> (embed; bug #527997)
501    
502    libbotan
503            - monotone 0.43-1 (embed)
504    
505    NetXX
506            - monotone 0.43-1 (embed)
507    
508    libgc
509            - mono <unfixed> (embed)
510    
511    lzma
512            - p7zip <unfixed> (embed)
513            - xz-utils <unfixed> (fork)
514    
515    lzo
516            - grub2 <unfixed> (embed)
517    
518    yassl
519            - mysql-dfsg-5.0 <unfixed> (embed)
520    
521    pax code
522            - tar <unfixed> (embed)
523            - cpio <unfixed> (embed)
524    
525    t1lib
526            - tetex-bin 2.0.2-1 (embed)
527            - texlive-bin <unknown> (embed)
528    
529    guichan
530            - boswars <unfixed> (embed)
531            NOTE: maintainer notified us, working on it
532    
533    tolua
534            - boswars <unfixed> (embed)
535            NOTE: maintainer notified us, working on it
536    
537  etl-dev (will be renamed to libetl-dev soon):  asio-dev
538  synfig          - luxrender <removed> (embed)
539    
 libmms:  
540  xine-lib  xine-lib
541  mimms          - vlc <unfixed> (embed)
542            NOTE: only parts included in modules/access/rtsp
 FCKeditor:  
 knowledgeroot  
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
 TinyMCE:  
 wordpress  
 moodle  
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
 busybox  
   
 ffmpeg:  
 mplayer (#395252)  
   
 neon:  
 cadaver (all, but being worked on: #188381)  
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
   
 libmodplug:  
 gst-plugins-bad0.10  
   
 libvncserver:  
 vino  
   
 putty:  
 filezilla  
   
 tinyxml (not packaged in Debian):  
 filezilla  
   
 gv:  
 evince (ps/ tree from gv 3.5.8)  
 evince-gtk (not packaged in Debian)  
   
 libXbae:  
 libpawlib2-lesstif package (from Cernlib)  
   
 libXaw:  
 libpawlib2-lesstif package (from Cernlib)  
   
 (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  
   
 libgd2:  
 graphviz (lib/gd seems to be 2.0.33)  
   
 rar:  
 unrar-nonfree  
   
 unrar-free: (maybe this code is derived from the original rar, too?)  
 clamav (seems to be disabled in default config)  
   
 mplayer (DirectMedia Object loader):  
 xine-lib (src/libw32dll/)  
 vlc (modules/codec/dmo/)  
543    
544  libwpd (WordPerfect converter):  netpbm
545  openoffice.org          - tcl8.3 <unfixed> (embed)
546            - tcl8.4 <unfixed> (embed)
547            - tcl8.5 <unfixed> (embed)
548            NOTE: generic/tkImgGIF.c
549    
550    tk8.5
551            - tk8.0 <removed> (old-version)
552            - tk8.3 <unfixed> (old-version)
553            - tk8.4 <unfixed> (old-version)
554            - perl-tk <unfixable> (fork)
555    
556    samba
557            - mc 2:4.6.2~git20080311-1 (embed)
558            NOTE: maintainer is aware of this, currently searching a solution
559    
560    plib1.8.4c2
561            - boson <unfixed> (fork)
562            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
563    
564    fribidi
565            - quesoglc <unfixed> (embed)
566            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
567    
568    glew
569            - quesoglc <unfixed> (embed; bug #489341)
570            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
571    
572    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
573            - transcend <unfixed> (embed)
574            - cultivation <unfixed> (embed)
575            - passage <unfixed> (embed)
576            - gravitation <unfixed> (embed)
577    
578    tar
579            - libarchive <unfixed> (embed)
580            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
581    
582    cpio
583            - libarchive <unfixed> (embed)
584            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
585    
586    webkit
587            - qt4-x11 <unfixed> (embed)
588    
589    ftgl
590            - blender 2.46+dfsg-1 (embed)
591    
592    wv
593            - abiword <unfixed>
594    
595    qemu
596            - kvm <unfixed> (embed; bug #543159)
597            - xen-3 <unfixed> (embed)
598            - xen-unstable <unfixed> (embed)
599    
600    vgabios
601            - kvm <unfixed> (embed; bug #489442)
602    
603    bochs
604            - kvm <unfixed> (embed; bug #489442)
605    
606    speex
607            - vorbis-tools <unfixed> (embed)
608            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
609            - gst-plugins-good0.10 <unfixed> (embed)
610            - xine-lib <unfixed> (embed)
611            - libfishsound <unfixed> (embed)
612            - libannodex <unfixed> (embed)
613            - vlc <unfixed> (embed)
614            - xmms-speex <unfixed> (embed)
615            - libsdl-sound1.2 <unfixed> (embed)
616            - sweep <unfixed> (embed)
617    
618    libreadline
619            - magic <itp> (old-version)
620    
621    opcode
622            - ode <unfixed> (embed)
623            NOTE: opcode is not a package in debian, it is just embedded
624            NOTE: http://www.codercorner.com/Opcode.htm
625    
626    gimpact
627            - ode <unfixed> (embed)
628            NOTE: gimpact is not a package in debian, it is just embedded
629            NOTE: http://gimpact.sf.net
630    
631    mochikit
632            - mahara <unfixed> (embed)
633            NOTE: they require extra patches, still unmerged upstream
634            - ntop <unfixed> (embed)
635            - coherence 0.6.2-1 (embed)
636            - paste <unfixed> (embed)
637            - turbogears <unfixed> (embed)
638            - plone3 <unfixed> (embed)
639            - xulrunner <unfixed> (embed)
640            - libjifty-plugin-chart-perl <unfixed> (embed)
641            - sabnzbdplus <unfixed> (embed)
642            - tgmochikit <unfixed> (embed)
643    
644    prototypejs
645            - netbeans-ide 6.0.1+dfsg-2 (embed)
646            - auth2db <unfixed> (embed; bug #555218)
647            - webcit <unfixed> (embed; bug #555219)
648            - asterisk 1:1.6.2.0~rc3-1 (embed)
649            - libjson-ruby <unfixed> (embed; bug #555224)
650            - lucene2 <unfixed> (embed; bug #555226)
651            - horde3 <unfixed> (embed)
652            - knowledgeroot <unfixed> (embed; bug #555230)
653            - mediatomb <unfixed> (embed; bug #555233)
654            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
655            - ebug-http <unfixed> (embed; bug #555236)
656            - phpgedview <removed> (embed)
657            - poker-network <unfixed> (embed; bug #555238)
658            - rails 2.1.0-6 (embed)
659            - wordpress 2.5.0-2 (embed; bug #555243)
660            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
661            TODO: search through all of the other zope packages
662            - ampache 3.4.1-2 (embed)
663            - exaile <unfixed> (embed; bug #555245)
664            - hobix <unfixed> (embed; bug #555247)
665            - zabbix <unfixed> (embed; bug #555250)
666            - chora2 <unfixed> (embed; bug #555253)
667            - gollem <unfixed> (embed; bug # 555254)
668            - jscropperui <unfixed> (embed; bug #555257)
669            - scriptaculous <unfixed> (embed; bug #555260)
670            - ingo1 <unfixed> (embed; bug #555261)
671            - kronolith2 <unfixed> (embed; bug #555262)
672            - activeldap <unfixed> (embed)
673            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
674            - mantis <unfixed> (embed; bug #555265)
675            - otrs2 <unfixed> (embed; bug #555267)
676            - webcalendar <unfixed> (embed; bug #555269)
677            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
678            - jifty <unfixed> (embed; bug #555271)
679            - jquery <unfixed> (embed; bug #555272)
680            - passenger <unfixed> (embed; bug #555273)
681            - plone3 <unfixed> (embed; bug #555275)
682            - wesnoth <unfixed> (embed; bug #555277)
683            - xulrunner <unfixed> (embed)
684            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
685    
686    gdb
687            - insight <unfixed> (embed)
688    
689    e2fsprogs
690            - ldiskfsprogs <unfixable> (fork)
691    
692    quazip (not packaged in Debian)
693            - qcake <unfixed> (embed)
694            NOTE: starting with upstream version 0.6.4
695    
696    exo
697            - pcmanfm <unfixed> (embed; bug #499677)
698            NOTE: slightly modified source code
699    
700    java
701            - openjdk-6 <unfixed>
702            - sun-java5 <unfixed>
703            - sun-java6 <unfixed>
704    
705    libphp-snoopy
706            - ampache 3.4.1-2 (embed; bug #504169)
707            - mahara 1.0.5-2 (embed; bug #504170)
708            - pixelpost 1.7.1-5 (embed; bug #504171)
709            - mediamate 0.9.3.6-5 (embed; bug #504172)
710            - opendb <removed> (embed; bug #504173)
711            [etch] - opendb <unfixed> (embed; bug #504173)
712            - wordpress 2.5.1-9 (embed; bug #443948)
713            - moodle <unfixed> (embed; bug #507185)
714            [etch] - phpgroupware <unfixed> (embed)
715            NOTE: phpgroupware-felamimail
716            - magpierss 0.72-3 (embed; bug #431089)
717    
718    jquery
719            - zekr <unfixed> (embed)
720            - wordpress <unknown> (embed)
721            - yocto-reader <unfixed> (embed)
722            - textpattern <unfixed> (embed)
723            - genshi 0.5.1-1 (embed)
724            NOTE: compressed file under examples/ dir
725            - prewikka <unfixed> (embed)
726            - libramaze-ruby <unfixed> (embed)
727            - drupal5 <unfixed> (embed)
728            - b2evolution <unfixed> (embed)
729            - wesnoth <unfixed> (embed)
730    
731    tablesorter (jquery plugin, not packaged yet)
732            - wesnoth <unfixed> (embed)
733    
734    kses
735            - wordpress <unfixed> (embed; bug #504242)
736            NOTE: their copy has all methods renamed to wp_<foo>
737            NOTE: kses isn't in Debian, RFP: #504240
738            - moodle <unfixed> (embed; bug #507185)
739            - egroupware <unfixed> (embed)
740    
741    magpierss
742            - wordpress <unfixed> (embed; bug #504242)
743            - moodle <unfixed>
744    
745    php-gettext
746            - wordpress 2.8.4-1 (embed; bug #504242)
747    
748    libphp-ixr (name may change, it is the Incutio XML-RPC)
749            - wordpress <unfixed> (embed; bug #504242)
750            NOTE: libphp-ixr isn't in Debian, RFP: #504236
751            - dokuwiki <unfixed> (embed)
752            - textpattern <unfixed> (embed)
753    
754    libphp-cas
755            - glpi <unfixed> (embed)
756            - moodle <unfixed> (embed; bug #505984)
757    
758    scriptaculous (prototype.js is among the embeds in the following)
759            - glpi <unfixed> (embed)
760            - libaws <unfixed> (embed; bug #555222)
761            - op-panel <unfixed> (embed)
762            - symfony <unfixed> (embed)
763            NOTE: maintainer says there are extra incompatible changes required
764            - pixelpost <unfixed> (embed)
765            - webhelpers <unfixed> (embed)
766            - qwik <unfixed> (embed; bug #555241)
767            - smokeping <unfixed> (embed)
768            - turba2 <unfixed> (embed)
769            - typo3-src 4.2.3-1 (embed)
770            - request-tracker3.6 <unfixed> (embed)
771            - request-tracker3.8 <unfixed> (embed)
772            - rt-extension-emailcompletion <unfixed> (embed)
773    
774    libmarkdown-php
775            - moodle <unfixed> (embed; bug #507185)
776            - pixelpost <unfixed> (embed)
777    
778    php-openid
779            - wordpress-openid <itp> (embed)
780    
781    geshi
782            - dokuwiki 0.0.20080505-3.1 (embed)
783            - pgfouine 1.0-1.1 (embed)
784            - websvn 2.1.0-1 (embed)
785    
786    webcalendar
787            - gforge 4.7~rc2-6 (embed; bug #504758)
788    
789    libical
790            - kdepim <unfixed> (fork)
791            - kdepimlibs <unfixed> (fork)
792            NOTE: fixed in KDE4 post 4.1.x series
793            - claws-mail-extra-plugins <unfixed> (fork)
794    
795    libltdl3
796            - kdelibs <unfixed> (embed)
797            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
798            - synfig <unfixed> (embed)
799    
800    harfbuzz
801            - qt4-x11 <unfixed> (embed)
802    
803    libzip
804            - php5 <unfixed> (fork)
805            - odt2txt <unfixed> (embed; bug #523808)
806    
807    json.php (not packaged; should be replaced with php's built-in functions)
808            - moodle <unfixed>
809            - yui <unfixed>
810            - gallery2 <unfixed>
811            - dokuwiki <unfixed>
812            - typo3-src <unfixed>
813    
814    php-fpdf
815            - tcpdf <itp> (fork)
816            - moodle <unfixed>
817            - phpwiki <unfixed>
818            - egroupware <unfixed>
819            - ldap-account-manager <unfixed> (fork)
820    
821    tcpdf (itp: #495985)
822            - moodle <unfixed>
823            - phpmyadmin <unfixed>
824    
825    typo3
826            - moodle <unfixed>
827    
828    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
829            - moodle <unfixed>
830            - gosa <unfixed>
831    
832    php-ole (itp: #487558)
833            - moodle <unfixed>
834    
835    pieforms (http://www.catalyst.net.nz)
836            - mahara <unfixed>
837    
838    savant2 (http://phpsavant.com)
839            - egroupware <unfixed>
840    
841    rssparser (http://nwow.org)
842            - egroupware <unfixed>
843            - phpgroupware <unfixed>
844    
845    lcms
846            - openjdk-6 <unfixed> (fork)
847    
848    libphp-phplayersmenu
849            - diogenes <unfixed>
850            - phpldapadmin <unfixed>
851    
852    libphp-pclzip
853            - docvert <unfixed>
854            - moodle <unfixed>
855            - egroupware <unfixed>
856    
857    libphp-simplepie
858            - dokuwiki <unfixed>
859    
860    libphp-jpgraph
861            - egroupware <unfixed>
862    
863    php-simpletest
864            - moodle <unfixed>
865    
866    libpng
867            - iceweasel <not-affected> (uses xulrunner)
868            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
869            - iceape 1.0.13~pre080614i-0etch1 (embed)
870            - xulrunner 1.9.0.13-1 (embed)
871            [lenny] - xulrunner 1.9.0.11-0lenny1
872            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
873            - gamera 3.2.3-1 (embed)
874    
875    irssi
876            - silc-client <unfixed> (embed)
877            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
878    
879    extc
880            - mtasc <unfixed> (embed)
881            - haxe <unfixed> (embed)
882    
883    swflib
884            - mtasc <unfixed> (embed)
885            - haxe <unfixed> (embed)
886    
887    libitext-java
888            - bouncycastle 2.1.4-1 (embed)
889    
890    python-ply
891            - pyke <unfixed> (embed)
892            - pywbem <unfixed> (embed)
893            - sepolgen <unfixed> (embed)
894            - zope-textindexng3 <unknown> (embed)
895            - iceweasel <unknown> (embed)
896            - xulrunner <unknown> (embed)
897            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
898    
899    libdumbnet (libdnet upstream)
900            - nmap <unfixed> (fork)
901    
902    gcc-4.4
903            - gcc-mingw32 <unfixed> (embed)
904    
905    camlimages
906            - advi <unfixed> (static; bug #550441)
907    
908    memcached
909            - memcachedb <unfixed> (embed)
910    
911    yajl
912            - argyll <unfixed> (embed; bug #544223)
913            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
914    
915    libept
916            - adept <unfixed> (embed; bug #540649)
917    
918    libvorbis
919            - iceweasel <not-affected> (uses xulrunner)
920            - xulrunner <unfixed> (embed; bug #540959)
921            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
922            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
923    
924    cairo
925            - iceweasel <not-affected> (uses xulrunner)
926            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
927    
928    liboggz
929            - iceweasel <not-affected> (uses xulrunner)
930            - xulrunner <unfixed> (embed; bug #540949)
931            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
932            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
933    
934    
935    liboggplay
936            - iceweasel <not-affected> (uses xulrunner)
937            - xulrunner <unfixed> (embed; bug #540949)
938            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
939            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
940    
941    php-net-dnsbl
942            - serendipity <unfixed> (embed)
943    
944    php-onyx-rss
945            - serendipity <unfixed> (embed)
946    
947    php-text-wiki
948            - serendipity <unfixed> (embed)
949    
950    php-xml-rpc
951            - serendipity <unfixed> (embed)
952    
953    polarssl (does not have a shared library)
954            - pdkim <itp> (embed; bug #543150)
955            - xyssl <unfixed> (old-version)
956    
957    pidgin
958            - gaim <removed> (old-version)
959    
960    icu
961            - webkit 1.0.1-1 (embed; bug #547214)
962            - texlive-bin <unfixed> (fork)
963            NOTE: texlive upstream working with icu upstream to merge their changes
964    
965    cyrus-imapd-2.2
966            - kolab-cyrus-imapd <unfixed> (fork)
967            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
968    
969    python-cxx-dev
970            - freecad <unfixed> (embed; bug #547936)
971    
972    libzipios++-dev
973            - freecad <unfixed> (embed; bug #547941)
974    
975    linux-2.6
976            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
977            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
978            - kernel-source-2.6.8 <removed> (old-version)
979            - kernel-source-2.4.27 <removed> (old-version)
980            - kernel-source-2.4.24 <removed> (old-version)
981            - kernel-source-2.2.25 <removed> (old-version)
982            - kernel-source-2.2.20 <removed> (old-version)
983    
984    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
985            - kvm <unfixed> (embed) [./libfdt/*]
986    
987    qweb (not packaged)
988            - ajaxterm <unfixed>
989    
990    opensaml2
991            - opensaml <removed> (old-version)
992    
993    shibboleth-sp2
994            - shibboleth-sp <removed> (old-version)
995    
996    tuxonice-userui
997            - suspend2-userui <removed> (old-version)
998    
999    expat
1000            - w3c-libwww <removed> (embed; bug #551941)
1001            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1002            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1003            - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1004            - python2.4 <unfixed> (embed; bug #553403)
1005            - wxwindows2.4 <removed> (embed)
1006            - wxwidgets2.6 <unfixed> (embed)
1007            - wxwidgets2.8 <unfixed> (embed)
1008            - celementtree <unfixed> (embed)
1009            - audacity <unfixed> (embed)
1010            - matanza <unfixed> (embed)
1011            - tdom <unfixed> (embed)
1012            - udunits <unfixed> (embed)
1013            - apr-util 1.2 (embed)
1014            - ayttm <unfixed> (embed)
1015            - cableswig <unfixed> (embed)
1016            - cadaver <unfixed> (embed)
1017            - cmake <unfixed> (embed)
1018            - coin3 <unfixed> (embed)
1019            - gdcm <unfixed> (embed)
1020            - ghostscript <unfixed> (embed)
1021            - grmonitor <unfixed> (embed)
1022            - iceape <unfixed> (embed)
1023            - insighttoolkit <unfixed> (embed)
1024            - libparagui1.1 <unfixed> (embed)
1025            - paraview <unfixed> (embed)
1026            - poco <unfixed> (embed)
1027            - simgear <unfixed> (embed)
1028            - sitecopy <unfixed> (embed)
1029            - smart 1.0-1 (embed)
1030            [etch] - smart <unfixed> (embed)
1031            - swish-e <unfixed> (embed)
1032            - tla <unfixed> (embed)
1033            - vtk <unfixed> (embed)
1034            - wbxml2 <unfixed> (embed)
1035            - xmlrpc-c <unfixed> (embed)
1036            - iceweasel <unfixed> (embed)
1037            - kompozer <unfixed> (embed)
1038            - vxl <unfixed> (embed)
1039            - xulrunner <unfixed> (embed)
1040            - apache2 2.2 (embed)
1041            - texlive-bin <unfixed> (embed) [included twice]
1042            - vnc4 <unfixed> (embed)
1043            - xotcl <unfixed> (embed)
1044    
1045    xerces-c
1046            - xerces-c2 <unfixed> (old-version)
1047            - xerces27 <removed> (old-version)
1048    
1049    md5 (RSA's version; not the gnu version provided by coreutils)
1050            - w3c-libwww <removed> (embed; bug #551942)
1051            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1052    
1053    enet
1054            - sauerbraten <unfixed> (embed; #497194)
1055    
1056    eglibc
1057            - glibc <removed> (old-version)
1058    
1059    galib
1060            - gamera 3.2.3-1 (embed)
1061    
1062    configobj
1063            - bzr <unfixed> (embed)
1064            - elisa <unfixed> (embed)
1065            - gaupol <unfixed> (embed)
1066            - ipython <unfixed> (embed)
1067            - pida <unfixed> (embed)
1068            - psychopy <unfixed> (embed)
1069            - rest2web <unfixed> (embed)
1070            - auth2db <unknown> (embed)
1071            - dynagen <unknown> (embed)
1072            - iceweasel <unknown> (embed)
1073            - sabnzbdplus <unknown> (embed)
1074            - xulrunner <unknown> (embed)
1075            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1076    
1077    python-clientform
1078            - bibus <unfixed> (embed)
1079            - zope2.10 <unfixed> (embed)
1080            - zope2.11 <unfixed> (embed)
1081            - python-mechanize <unknown> (embed)
1082            - twill <unknown> (embed)
1083    
1084    python-mechanize
1085            - zope2.10 <unfixed> (embed)
1086            - zope2.11 <unfixed> (embed)
1087            - twill <unknown> (embed)
1088    
1089    pexpect
1090            - duplicity <unfixed> (embed)
1091            - hplip <unfixed> (embed)
1092            - smart <unfixed> (embed)
1093    
1094    pyparsing
1095            - bauble <unfixed> (embed)
1096            - boa-constructor <unfixed> (embed)
1097            - calibre <unfixed> (embed)
1098            - matplotlib <unfixed> (embed)
1099            - zhpy <unfixed> (embed)
1100            - polybori <unknown> (embed)
1101            - python-whoosh <unknown> (embed)
1102            - twill <unknown> (embed)
1103            - zope-textindexng3 <unknown> (embed)
1104    
1105    python-pysqlite2
1106            - python2.4 <unfixed> (embed; bug #553403)
1107            - python2.5 <unfixed> (embed; bug #553403)
1108    
1109    celementtree
1110            - python2.5 <unfixed> (embed)
1111            - smart 1.0-1 (embed)
1112            [etch] - smart <unfixed> (embed)
1113    
1114    elementtree
1115            - python2.5 <unfixed> (embed)
1116            - bzr <unfixed> (embed)
1117            - gedit <unfixed> (embed)
1118            - smart 1.0-1 (embed)
1119            [etch] - smart <unfixed> (embed)
1120            - solfege <unfixed> (embed)
1121            - w3af <unfixed> (embed)
1122            - python-qt4 <unknown> (embed)
1123            - sphinx <unknown> (embed)
1124            - python-nltk <itp> (embed)
1125    
1126    python2.5
1127            - python2.4 <unfixed> (old-version)
1128            - jython <unfixed> (embed)
1129            NOTE: embeds many stdlib modules
1130            - python-django <unfixed> (embed)
1131            NOTE: embeds stdlib modules: doctest, decimal
1132            - gamera 3.2.3-1 (embed)
1133            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1134            - boa-constructor <unfixed> (embed)
1135            NOTE: embeds stdlib modules: ConfigParser
1136            - nicotine <unfixed> (embed)
1137            NOTE: embeds stdlib modules: ConfigParser
1138            - museek+ <unfixed> (embed)
1139            NOTE: embeds stdlib modules: ConfigParser
1140            - vegastrike-data <unfixed> (embed)
1141            NOTE: embeds many stdlib modules
1142            - codespeak-lib <unfixed> (embed)
1143            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1144            - config-manager <unfixed> (embed)
1145            NOTE: embeds stdlib modules: optparse
1146            - jhbuild <unfixed> (embed)
1147            NOTE: embeds stdlib modules: optparse, subprocess
1148            - smart <unfixed> (embed)
1149            NOTE: embeds stdlib modules: optparse
1150            - pyprotocols <unfixed> (embed)
1151            NOTE: embeds stdlib modules: doctest
1152            - ruledispatch <unfixed> (embed)
1153            NOTE: embeds stdlib modules: doctest
1154            - distribute <unfixed> (embed)
1155            NOTE: embeds stdlib modules: doctest
1156            - python-setuptools <unfixed> (embed)
1157            NOTE: embeds stdlib modules: doctest
1158            - zope.testing <unfixed> (embed)
1159            NOTE: embeds stdlib modules: doctest
1160            - translate-toolkit <unfixed> (embed)
1161            NOTE: embeds stdlib modules: textwrap, contextlib
1162            - libtpclient-py <unfixed> (embed)
1163            NOTE: embeds stdlib modules: subprocess
1164            - grass <unfixed> (embed)
1165            NOTE: embeds stdlib modules: subprocess
1166            - coherence <unfixed> (embed)
1167            NOTE: embeds stdlib modules: uuid
1168            - python-django-extensions <unfixed> (embed)
1169            NOTE: embeds stdlib modules: uuid
1170            - setroubleshoot <unfixed> (embed)
1171            NOTE: embeds stdlib modules: uuid
1172            - linkchecker <unfixed> (embed)
1173            NOTE: embeds msgfmt.py script
1174            - imdbpy <unfixed> (embed)
1175            NOTE: embeds msgfmt.py script
1176            - kiwi <unfixed> (embed)
1177            NOTE: embeds msgfmt.py script
1178            - moin <unfixed> (embed)
1179            NOTE: embeds msgfmt.py script
1180            - plone3 <unfixed> (embed)
1181            NOTE: embeds msgfmt.py script
1182            - roundup <unfixed> (embed)
1183            NOTE: embeds msgfmt.py script
1184            - rednotebook <unfixed> (embed)
1185            NOTE: embeds msgfmt.py script
1186            - turbogears <unfixed> (embed)
1187            NOTE: embeds msgfmt.py script
1188            - elisa <unfixed> (embed)
1189            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1190            - calibre <unfixed> (embed)
1191            NOTE: embeds msgfmt.py script
1192            - mailman <unfixed> (embed)
1193            NOTE: embeds msgfmt.py script
1194            - python-docutils <unknown> (embed)
1195            NOTE: embeds stdlib modules: optparse, textwrap
1196            - python-imaging <unknown> (embed)
1197            NOTE: embeds stdlib modules: doctest
1198            - python-mechanize <unknown> (embed)
1199            NOTE: embeds stdlib modules: doctest
1200            - twill <unknown> (embed)
1201            NOTE: embeds stdlib modules: subprocess
1202            - zeroc-ice <unknown> (embed)
1203            NOTE: embeds stdlib modules: subprocess
1204            - wxwidgets2.8 <unknown> (embed)
1205            NOTE: embeds stdlib modules: subprocess
1206            - cycle <unknown> (embed)
1207            NOTE: embeds msgfmt.py script
1208            - deluge <unknown> (embed)
1209            NOTE: embeds msgfmt.py script
1210            - opendict <unknown> (embed)
1211            NOTE: embeds msgfmt.py script
1212            - openerp-client <unknown> (embed)
1213            NOTE: embeds msgfmt.py script
1214            - rapidsvn <unknown> (embed)
1215            NOTE: embeds msgfmt.py script
1216            - wammu <unknown> (embed)
1217            NOTE: embeds msgfmt.py script
1218            - gaphor <unknown> (embed)
1219            NOTE: embeds msgfmt.py script
1220            - pida <unknown> (embed)
1221            NOTE: embeds msgfmt.py script
1222            - python-formencode <unknown> (embed)
1223            NOTE: embeds msgfmt.py script
1224    
1225    argparse
1226            - twill <unfixed> (embed)
1227            - ipython <unfixed> (embed)
1228    
1229    coherence
1230            - elisa <unfixed> (embed)
1231    
1232    simpletal
1233            - plastex <unfixed> (embed)
1234    
1235    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1236            - postr <unfixed> (embed)
1237            - elisa <unfixed> (embed)
1238    
1239    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1240            - apertium-tolk <unfixed> (embed)
1241            - ipython <unfixed> (embed)
1242            - virtaal <unfixed> (embed)
1243    
1244    distribute
1245            - setuptools <removed> (old-version)
1246    
1247    rails
1248            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1249            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1250            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1251            - thin <unfixed> (embed) [./spec/rails_app/*]
1252            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1253            NOTE: be dangerous if developers are naively basing their code off of the examples
1254            NOTE: prototype.js is among the example files
1255    
1256    lucene2 (prototype.js is among the embeds in the following)
1257            - lucene <unfixed> (old-version)
1258            - pylucene <unfixed> (embed)
1259            - libpdfbox-java <unfixed> (embed)
1260            - libfontbox-java <unfixed> (embed)
1261            - libjempbox-java <unfixed> (embed)
1262            - solr <unfixed> (embed)
1263    
1264    unicode-data
1265            - syslinux <unfixed> (embed)
1266            - camomile <unfixed> (embed)
1267            - fribidi <unfixed> (embed)
1268            - m17n-db <unfixed> (embed)
1269            - sbcl <unfixed> (embed)
1270            - heimdal <unfixed> (embed)
1271            - icu <unfixed> (embed)
1272            - icu4j <unfixed> (embed)
1273            - krb5 <unfixed> (embed)
1274            - moodle <unfixed> (embed)
1275            - openldap <unfixed> (embed)
1276            - pike7.6 <unfixed> (embed)
1277            - samba <unfixed> (embed)
1278            - samba4 <unfixed> (embed)
1279            - cmucl <unfixed> (embed)
1280            - typo3-src <unfixed> (embed)
1281            - mauve <unfixed> (embed)
1282            - texlive-bin <unfixed> (embed)
1283            - ypsilon <unfixed> (embed)
1284            - jeuclid <unfixed> (embed)
1285            - charmap.app <unfixed> (embed)
1286            - clisp <unfixed> (embed)
1287            - gnulib <unfixed> (embed)
1288            - opensrs-client <unfixed> (embed)
1289            - saxonb <unfixed> (embed)
1290            - rails <unfixed> (embed)
1291    
1292    feedparser
1293            - rawdog <unfixed> (embed; bug #383422)
1294            - miro <unfixed> (embed)
1295            - calibre <unfixed> (embed)
1296            - freevo <unfixed> (embed)
1297            - pida <unfixed> (embed)
1298            - planet-venus <unfixed> (embed)
1299            - plone3 <unfixed> (embed)
1300            - exaile <unknown> (embed)
1301            - screenlets <unknown> (embed)
1302            NOTE: included twice
1303    
1304    agg:
1305            - matplotlib <unfixed> (embed: bug #377271)
1306            - contextfree <unfixed> (embed)
1307            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1308            - exactimage <unfixed> (embed)
1309            - python-enable <unfixed> (embed)
1310            - mapnik 0.5.1-3 (embed)
1311            NOTE: links statically to agg, but shared library is not available (bug #377271)
1312    
1313    vtk
1314            - paraview <unfixable> (embed; bug #495426)
1315    
1316    txt2tags
1317            - rednotebook <unfixed> (embed)
1318    
1319    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1320            - gajim <unfixed> (embed)
1321            - emesene <unfixed> (embed)
1322            - convirt <unfixed> (embed)
1323            - pida <unfixed> (embed)
1324            - rednotebook <unfixed> (embed)
1325    
1326    horde3 (prototype.js is among the embeds in the following)
1327            - mnemo2 <unfixed> (embed)
1328            - nag2 <unfixed> (embed)

Legend:
Removed from v.5564  
changed lines
  Added in v.13242

  ViewVC Help
Powered by ViewVC 1.1.5