/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1588 by jmm-guest, Mon Aug 15 11:27:57 2005 UTC revision 13447 by gilbert-guest, Fri Dec 4 02:29:41 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
 kdegraphics/kpdf  
 tetex-bin  
 cupsys (only older releases, recent ones use xpdf-utils)  
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  zlib code: (separate between 1.2 and 1.1)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  dpkg          <itp>, <not-affected>, <unknown> if the version number can not
15  rsync          be determined, or <unfixable> for unavoidable cases (e.g., forks
16  mozilla-firefox          that add real value)
17  mozilla(?)  sort: static (linking statically against a lib)
18  Linux kernels        embed (embedding a copy of the library into another source package)
19          fork (the package is not just embedding code but it is a fork and
20                thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24    The srcpkg might be some string to identify the code if there is no
25    specific source package.
26    
27  libgadu/ekg:  Everything up to the next line is ignored.
28  centericq  ---BEGIN
29  gaim (?)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30  kopete (ships the code, but links dynamically in the Debian package)          NOTE: Fixed packages link to poppler library unless otherwise noted
31            - pdftohtml <unknown>
32            [sarge] - pdftohtml <unfixed>
33            [etch] - pdftohtml <unfixed>
34            NOTE: has been replaced by poppler-utils
35            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36            - texlive-base 3.0-12 (embed)
37            - texlive-bin 2007-1 (embed)
38            NOTE: links to poppler
39            - koffice <unfixed> (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50    ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54  xmlrpc: (which package is the "origin" of this code?)  libevent
55  drupal          - transmission 1.71-1 (embed; bug #529372)
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59    
60  shtool: (affects build-time only)  peercast
61  mysql-ocaml          - gnome-peercast <removed> (embed)
62  php4          [etch] - gnome-peercast <unfixed> (embed)
63    
64    silc-toolkit
65            - silc-client 1.1~beta6-1 (embed)
66    
67  mozilla:  icclib
68  mozilla-firefox          - ghostscript <unfixed> (embed)
69  mozilla-thunderbird          - argyll <unfixed> (embed)
 nvu  
70    
71    dietlibc
72            - ccontrol 0.9.1+20071204-1 (static)
73    
74  xli:  libmikmod
75  xloadimage          - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78    libiax
79            - iaxmodem <unfixable> (embed; bug #548885)
80    
81  lesstif: (beware: two different lesstif APIs supported in one package, 1.2 discarded upstream)  spandsp
82  openmotif          - iaxmodem <unfixable> (embed; bug #548885)
 xfree86/xorg (in libxpm, still the case with x.org?  
83    
84    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85            - dpkg <unfixed> (embed)
86            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87            - rsync <unfixed> (embed)
88            NOTE: somehow derived code base
89            - mono <unfixed> (embed)
90            TODO: check mozilla
91            - Linux kernels <unfixed> (embed)
92            - pvpgn 1.7.8-2 (embed)
93            - mrtg 2.12.2-1 (embed)
94            - rpm <unknown> (embed)
95            NOTE: pinged anibal since when rpm was fixed
96            - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98            - tra <unfixed>
99            - sash <unfixed>
100            - nsis <unfixed>
101            - mseide-msegui <unfixed>
102            NOTE: mseide
103            - mirrordir <unfixed>
104            - poco <unfixed>
105            - klibc <unfixed>
106            - ghostscript <unfixed>
107            - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112            - perl <unfixed>
113            - paraview <unfixed>
114            - gcvs <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125            - gamera 3.2.3-1 (embed)
126            - python2.4 <unfixed> (embed; bug #553403)
127            - python2.5 <unfixed> (embed; bug #553403)
128    
129  kerberized apps with BSD origin:  dulwich
130  krb4          - hg-git 0.1.0-1 (embed; bug #541996)
 krb5  
 heimdal  
131    
132    libvigraimpex
133            - hugin <unfixed> (embed; bug #542259)
134            - enblend-enfuse <unfixed> (embed; bug #542258)
135            - gamera 3.2.3-1 (embed)
136    
137  grip: (which pkg is the origin?)  libbz2
138  libcdaudio          - dpkg <unfixed> (static)
139  grip  
140  gnome-vfs (vfs2 as well?)  libgadu
141            - centericq <unfixed> (embed)
142            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144            - kdenetwork 4:3.3.2-5 (embed)
145            NOTE: from kdenetwork: kopete
146            - ekg 1:1.8~rc0-1 (embed)
147            - kadu 0.6.0.2-3 (embed; bug #504430)
148            - gadu <itp> (embed)
149    
150    xmlrpc (which package is the "origin" of this code?)
151            - drupal <unfixed> (embed)
152            - phpgroupware <unfixed> (embed)
153            - egroupware <unfixed> (embed)
154            - phpwiki <unfixed> (embed)
155            - php4 <unfixed> (embed)
156            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157    
158    shtool (affects build-time only)
159            - mysql-ocaml <unfixed> (embed)
160            - php4 <unfixed> (embed)
161    
162    iceape
163            - iceweasel <unfixed> (fork)
164            - icedove <unfixed> (fork)
165            - xulrunner <unfixed> (fork)
166            - kompozer <unfixed> (embed; bug #532168)
167            - galeon <unfixed> (fork)
168            - epiphany-browser <unfixed> (fork)
169            - conkeror <unfixed> (fork)
170            - kazehakase <unfixed> (fork)
171    
172    xli
173            - xloadimage <unfixed> (embed)
174    
175    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
176            - openmotif <unfixed> (embed)
177            - libxpm <unfixed> (embed)
178    
179    kerberized apps with BSD origin
180            - krb4 <removed> (embed)
181            - krb5 <unfixed> (embed)
182            - heimdal <unfixed> (embed)
183    
184    grip (which pkg is the origin?)
185            - libcdaudio <unfixed>
186            - grip <unfixed>
187            - gnome-vfs <unfixed>
188            TODO: check vfs2 as well
189    
190    fudforum
191            [etch] - phpgroupware <unfixed> (embed)
192            NOTE: phpgroupware-fudforum
193            [sarge] - egroupware-fudforum <removed> (embed)
194    
195    libbsd
196            - rdate 1:1.2-3 (embed)
197            - atheme-services <unfixed>
198            - libbsd-arc4random-perl <unfixed>
199            - isakmpd <unfixed>
200    
201    cvs
202            - gcvs <unfixed> (embed)
203            NOTE: see cvsunix/src in tarball
204    
205    pcre3
206            - php4 <unknown> (embed)
207            - analog 2:5.23-0woody1 (embed)
208            - goffice <unfixed> (embed)
209            NOTE: libgoffice-*
210            - vfu 4.06-4.1 (embed; bug #450754)
211            - tf5 5.0beta7-1 (embed)
212            - monotone 0.43-1 (embed)
213            NOTE: this only affects versions >= 0.37
214            - glib2.0 2.15.2-1 (embed)
215            - apache2 2.0.53-4 (embed)
216            - exim4 4.10-0.srh20.12 (embed)
217            - yacas <unfixed> (embed)
218            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
219            - gtamsanalyzer.app 0.42-5 (embed)
220            - tin 980117-1 (embed)
221            - kazehakase 0.5.2-1
222            - webkit 1.0.1-1 (embed)
223            - qt4-x11 <unfixed> (embed)
224            NOTE: embedded via webkit copy
225            - erlang <unfixed> (embed)
226    
227    tiff
228            - wxwindows2.4 2.2.1 (embed)
229            - gamera 3.2.3-1 (embed)
230    
231    uudeview
232            - libconvert-uulib-perl <unfixed> (embed)
233            - pan <unfixed> (embed)
234    
235    sqlite (not affected by security vulnerabilities so far)
236            - amarok <unfixed> (embed)
237            - monotone 0.43-1 (embed)
238            - iceweasel <unfixed> (embed)
239    
240    util-linux/mount
241            - loop-aes-utils <unfixed> (embed)
242            NOTE: contains code from util-linux' mount in the mount-aes-udeb
243    
244    sylpheed
245            - sylpheed-claws <unfixed> (fork)
246    
247    phpsysinfo
248            - egroupware <unfixed> (embed)
249            - phpgroupware <unfixed> (embed)
250    
251    phpldapadmin
252            [sarge] - egroupware <unfixed> (embed)
253            NOTE: removed from egroupware after sarge
254    
255    chmlib
256            - kchmviewer <unknown> (embed)
257    
258    ffmpeg (libavcodec/libavformat)
259            - mplayer 1.0~rc2-14 (embed; bug #395252)
260            - kino 1.0.0-1
261            - vlc <not-affected> (Links dynamically since initial release)
262            - smilutils 0.3.0-10
263            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
264            - motion 3.1.19-1
265            - gstreamer0.10-ffmpeg 0.10.3-2
266            - xmovie <removed> (static)
267            TODO: gimp-gap (potentially using ffmpeg code as well)
268            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
269    
270    faad2
271            - mplayer 1.0~rc2-20 (embed)
272            - avifile <unfixed> (embed; bug #538750)
273            - ffmpeg-debian <removed> (old-version)
274    
275    libmad (MPEG decoding lib)
276            - xine-lib <unfixed> (embed)
277            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
278            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
279    
280    libdts
281            - xine-lib <unfixed> (embed)
282    
283    flac
284            - xine-lib <unfixed> (embed)
285    
286    liba52
287            - a52dec <unfixed> (embed)
288            - xine-lib <unfixed> (embed)
289    
290    libmpeg2
291            - mpeg2dec <unfixed> (embed)
292            - xine-lib <unfixed> (embed)
293    
294    libntlm
295            - wget <unfixed> (fork; bug #550436)
296            - curl <unfixed> (fork; bug #550437)
297            - cntlm <unfixed> (fork; bug #550438)
298    
299    uw-imap
300            - pine <unfixed> (embed)
301            - alpine <unfixed> (embed)
302    
303    imagemagick
304            - graphicsmagick <unfixed> (fork)
305    
306    python-urlgrabber
307            - mercurial <unfixed> (embed; bug #531062)
308            - w3af <unfixed> (embed; bug #555372)
309            [experimental] - harvestman <unfixed> (embed; bug #555373)
310    
311    beautifulsoup
312            - python-mechanize <unfixed> (embed; bug #555349)
313            - zope2.11 <unfixed> (embed; bug #555350)
314            - twill <unknown> (embed)
315    
316    halibut
317            - nsis <unfixed> (fork)
318    
319    libghttp
320            - hotway <unfixed> (embed)
321    
322    libsndfile
323            - ardour 1:2.7.1-1 (embed)
324    
325    glibmm2.4
326            - ardour 1:2.7.1-1 (embed)
327    
328    libgnomecanvasmm2.6
329            - ardour 1:2.7.1-1 (embed)
330    
331    libsigc++-2.0
332            - ardour 1:2.7.1-1 (embed)
333    
334    soundtouch
335            - ardour 1:2.7.1-1 (embed)
336    
337    libmms
338            - xine-lib <unfixed> (embed)
339            - mimms <unfixed> (embed)
340    
341    fckeditor
342            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
343            - moin 1.8.2-2 (embed; bug #452599)
344            - karrigell <removed> (embed; bug #452598)
345            - gforge 4.6.99+svn6225-1 (embed)
346            - request-tracker3.8 <unfixed> (embed)
347    
348    ipatlas (not packaged in Debian)
349            - moodle <unfixed> (embed; bug #507185)
350    
351    libphp-phpmailer
352            - moodle <unfixed> (embed; bug #507185)
353            - mahara <unfixed> (embed)
354            - symfony <unfixed> (embed)
355            [etch] - phpgroupware <unfixed> (embed)
356            NOTE: phpgroupware-felamimail is only in etch
357            - egroupware <unfixed> (embed; bug #504283)
358            - glpi <unfixed>
359    
360    htmlArea (not packaged in Debian)
361            - moodle <unfixed> (embed)
362    
363    giflib
364            - wine <unfixed> (embed; bug #466181)
365    
366    bennu (not packaged in Debian, http://bennu.sourceforge.net)
367            - moodle <unfixed> (embed)
368    
369    smarty
370            - moodle 1.8.2-2 (embed; bug #471158)
371            - gallery2 2.2.5-2 (embed; bug #471160)
372            - mahara 0.9.2-2 (embed; bug #471201)
373            - gosa 2.4beta1-1 (embed; bug #471200)
374    
375    TinyMCE
376            - wordpress 2.5.1-3 (embed; bug #478257)
377            - moodle <unfixed> (embed; bug #507185)
378            - knowledgeroot <unfixed> (embed)
379            - joomla <itp> (bug #326398)
380    
381    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
382            - scite <unfixed> (embed)
383            - qscintilla <unfixed> (embed)
384            - qscintilla2 <unfixed> (embed)
385            - geany <unfixed> (fork)
386            - anjuta <unfixed> (embed)
387    
388    libphp-adodb
389            - moodle <unfixed> (embed; bug #507185)
390            NOTE: also AdoDB-XML Schema
391            - gallery2 <unfixed> (embed)
392            - phppgadmin <unfixed> (embed)
393            - egroupware <unfixed> (embed)
394            - phpwiki <unfixed> (embed)
395            - torrentflux 2.0beta1-2 (embed)
396            - ipplan <unfixed> (embed)
397            - typo3-src <unfixed> (embed)
398            - cacti <unknown> (embed)
399            [sarge] - cacti <unfixed> (embed)
400            NOTE: dependency exists, but internal version is used
401            - gforge 4.7~rc2-6 (embed)
402            - mahara <unfixed> (embed)
403    
404    gzip
405            - linux-kernel <unfixed> (embed)
406            NOTE: lib/inflate.c
407            - klibc <unfixed> (embed)
408            NOTE: based on linux-kernel gzip code
409            - busybox <unfixed> (embed)
410    
411    neon
412            - cadaver 0.22.3+debian-1 (embed; bug #188381)
413            - gnome-vfs2 <unfixed> (embed; bug #395874)
414            [etch] - litmus <unfixed> (embed; #395875)
415            - litmus <removed> (embed; #395875)
416            [sarge] - screem <unfixed> (embed)
417            - sitecopy 1:0.16.3-5 (embed; bug #395876)
418            [etch] - tla <unfixed> (embed; bug #395877)
419            [sarge] - tla <unfixed> (embed; bug #395877)
420    
421    libmodplug
422            - gst-plugins-bad0.10 <unfixed> (embed)
423    
424    libvncserver
425            - vino <unfixed> (embed)
426    
427    putty
428            - filezilla <unfixed> (embed)
429    
430    tinyxml (not packaged in Debian; itp bug #531968)
431            - filezilla <unfixed>
432            - crystalspace <unfixed> (embed)
433            - libwfut <unfixed> (embed)
434            - rarian <unfixed> (embed)
435            - bulletml <unfixed> (embed)
436            - pokerth <unfixed> (embed)
437            - qutecom <unfixed> (embed)
438            - sofa-framework <unfixed> (embed)
439            - yate <unfixed> (embed)
440            - antigrav <unfixed> (embed)
441            - balder2d <unfixed> (embed)
442            - cal3d <unfixed> (embed)
443            - criticalmass <unfixed> (embed)
444            - ember <unfixed> (embed)
445            - epiphany <unfixed> (embed)
446            - gambit <unfixed> (embed)
447            - noiz2sa <unfixed> (embed)
448            - ogre <unfixed> (embed)
449            - opencity <unfixed> (embed)
450            - openmovieeditor <unfixed> (embed)
451            - pouetchess <unfixed> (embed)
452            - tecnoballz <unfixed> (embed)
453            - trigger-rally <unfixed> (embed)
454            - xmoto <unfixed> (embed)
455            - mapnik <unknown> (embed)
456            NOTE: uses a different XML parser by default
457            - rrootage 0.23a-6 <embed>
458            NOTE: links to libbulltetml
459            - boson <unknown> (embed)
460            NOTE: the embedded code is unused
461    
462    gv
463            - evince <unfixed> (embed)
464            NOTE: ps/ tree from gv 3.5.8
465            NOTE: evince-gtk is affected (a component of evince source package)
466    
467    libXbae
468            - paw <removed> (embed)
469            [etch] - paw <unfixed> (embed)
470    
471    libgtkhtml
472            - claws-mail-extra-plugins <unfixed> (fork)
473    
474    libXaw
475            - paw <removed> (embed)
476            [etch] - paw <unfixed> (embed)
477            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
478    
479    libgd2
480            - graphviz <unfixed> (embed)
481            NOTE: lib/gd seems to be 2.0.33
482            - wml <unfixed> (embed)
483            - libwmf <unfixed> (embed)
484            NOTE: derived from gd 1.6.3
485    
486    rar
487            - unrar-nonfree <unfixed> (embed)
488    
489    unrar-free (maybe this code is derived from the original rar, too?)
490            - clamav <unfixed> (embed)
491            NOTE: seems to be disabled in default config
492    
493    mplayer (DirectMedia Object loader)
494            - xine-lib <unfixed> (embed)
495            NOTE: src/libw32dll/
496            - vlc <unfixed> (embed)
497            NOTE: modules/codec/dmo/
498            - mplayer 1.0~rc2-20 (embed)
499    
500    libwpd (WordPerfect converter)
501            - openoffice.org <unfixed> (embed)
502    
503    fsplib (http://sourceforge.net/projects/fsp/)
504            - gftp <unfixed> (embed)
505            NOTE: lib/fsplib version 0.3
506    
507    sprng
508            - tree-puzzle <unfixed> (embed)
509    
510    librpcsecgss
511            - krb5 <unfixed> (embed)
512    
513    jasper
514            - ghostscript <unfixed> (embed)
515            - gs-gpl <unfixed> (embed)
516    
517    libiris
518            - psi <unfixed> (embed)
519            - kdenetwork <unfixed> (embed)
520            NOTE: kopete embeds libiris but links dynamically to libidn
521            - kdegames <unfixed> (embed)
522            NOTE: ksirk/kde4
523    
524    libidn
525            - monotone 0.43-1 (embed)
526            - psi <unfixed> (embed)
527            NOTE: psi embeds libiris which embeds libidn
528            - kdegames <unfixed> (embed)
529            NOTE: kdegames/kde4 embeds libiris which embeds libidn
530    
531    liblua
532            - monotone 0.43-1 (embed)
533            - nmap 5.00-1 (embed; bug #527997)
534            [lenny] - nmap <unfixed> (embed; bug #527997)
535            - ocropus <unfixed> (embed)
536    
537    libbotan
538            - monotone 0.43-1 (embed)
539    
540    NetXX
541            - monotone 0.43-1 (embed)
542    
543    libgc
544            - mono <unfixed> (embed)
545    
546    lzma
547            - p7zip <unfixed> (embed)
548            - xz-utils <unfixed> (fork)
549    
550    lzo
551            - grub2 <unfixed> (embed)
552    
553    yassl
554            - mysql-dfsg-5.0 <unfixed> (embed)
555    
556    pax code
557            - tar <unfixed> (embed)
558            - cpio <unfixed> (embed)
559    
560    t1lib
561            - tetex-bin 2.0.2-1 (embed)
562            - texlive-bin <unknown> (embed)
563    
564    guichan
565            - boswars <unfixed> (embed)
566            NOTE: maintainer notified us, working on it
567    
568    tolua
569            - boswars <unfixed> (embed)
570            NOTE: maintainer notified us, working on it
571            - ocropus <unfixed> (embed)
572            - freeciv <unfixed> (embed)
573    
574    asio-dev
575            - luxrender <removed> (embed)
576    
577    xine-lib
578            - vlc <unfixed> (embed)
579            NOTE: only parts included in modules/access/rtsp
580    
581    netpbm
582            - tcl8.3 <unfixed> (embed)
583            - tcl8.4 <unfixed> (embed)
584            - tcl8.5 <unfixed> (embed)
585            NOTE: generic/tkImgGIF.c
586    
587    tk8.5
588            - tk8.0 <removed> (old-version)
589            - tk8.3 <unfixed> (old-version)
590            - tk8.4 <unfixed> (old-version)
591            - perl-tk <unfixable> (fork)
592    
593    samba
594            - mc 2:4.6.2~git20080311-1 (embed)
595            NOTE: maintainer is aware of this, currently searching a solution
596    
597    plib1.8.4c2
598            - boson <unfixed> (fork)
599            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
600    
601    fribidi
602            - quesoglc <unfixed> (embed)
603            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
604    
605    glew
606            - quesoglc <unfixed> (embed; bug #489341)
607            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
608            - trigger <unfixed> (embed)
609            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
610            - trigger-rally <unfixed> (embed)
611            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
612    
613    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
614            - transcend <unfixed> (embed)
615            - cultivation <unfixed> (embed)
616            - passage <unfixed> (embed)
617            - gravitation <unfixed> (embed)
618    
619    tar
620            - libarchive <unfixed> (embed)
621            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
622    
623    cpio
624            - libarchive <unfixed> (embed)
625            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
626    
627    webkit
628            - qt4-x11 <unfixed> (embed)
629    
630    ftgl
631            - blender 2.46+dfsg-1 (embed)
632    
633    wv
634            - abiword <unfixed>
635    
636    qemu
637            - kvm <unfixed> (embed; bug #543159)
638            - xen-3 <unfixed> (embed)
639            - xen-unstable <unfixed> (embed)
640    
641    vgabios
642            - kvm <unfixed> (embed; bug #489442)
643    
644    bochs
645            - kvm <unfixed> (embed; bug #489442)
646    
647    speex
648            - vorbis-tools <unfixed> (embed)
649            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
650            - gst-plugins-good0.10 <unfixed> (embed)
651            - xine-lib <unfixed> (embed)
652            - libfishsound <unfixed> (embed)
653            - libannodex <unfixed> (embed)
654            - vlc <unfixed> (embed)
655            - xmms-speex <unfixed> (embed)
656            - libsdl-sound1.2 <unfixed> (embed)
657            - sweep <unfixed> (embed)
658    
659    libreadline
660            - magic <itp> (old-version)
661    
662    opcode
663            - ode <unfixed> (embed)
664            NOTE: opcode is not a package in debian, it is just embedded
665            NOTE: http://www.codercorner.com/Opcode.htm
666    
667    gimpact
668            - ode <unfixed> (embed)
669            NOTE: gimpact is not a package in debian, it is just embedded
670            NOTE: http://gimpact.sf.net
671    
672    mochikit
673            - mahara <unfixed> (embed)
674            NOTE: they require extra patches, still unmerged upstream
675            - ntop <unfixed> (embed)
676            - coherence 0.6.2-1 (embed)
677            - paste <unfixed> (embed)
678            - turbogears <unfixed> (embed)
679            - plone3 <unfixed> (embed)
680            - xulrunner <unfixed> (embed)
681            - libjifty-plugin-chart-perl <unfixed> (embed)
682            - sabnzbdplus <unfixed> (embed)
683            - tgmochikit <unfixed> (embed)
684    
685    prototypejs
686            - netbeans-ide 6.0.1+dfsg-2 (embed)
687            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
688            - webcit <unfixed> (embed; bug #555219)
689            - asterisk 1:1.6.2.0~rc3-1 (embed)
690            - libjson-ruby 1.1.4-1 (embed; bug #555224)
691            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
692            - horde3 <unfixed> (embed)
693            - knowledgeroot <unfixed> (embed; bug #555230)
694            - mediatomb <unfixed> (embed; bug #555233)
695            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
696            - ebug-http <unfixed> (embed; bug #555236)
697            - phpgedview <removed> (embed)
698            - poker-network <unfixed> (embed; bug #555238)
699            - rails 2.1.0-6 (embed)
700            - wordpress 2.5.0-2 (embed; bug #555243)
701            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
702            TODO: search through all of the other zope packages
703            - ampache 3.4.1-2 (embed)
704            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
705            - hobix 0.5~svn20070319-4 (embed; bug #555247)
706            - zabbix 1.6.6-4 (embed; bug #555250)
707            - chora2 <unfixed> (embed; bug #555253)
708            - gollem <unfixed> (embed; bug # 555254)
709            - jscropperui 1.2.1-1 (embed; bug #555257)
710            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
711            - ingo1 <unfixed> (embed; bug #555261)
712            - kronolith2 <unfixed> (embed; bug #555262)
713            - activeldap <unfixed> (embed)
714            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
715            - mantis <unfixed> (embed; bug #555265)
716            - otrs2 2.3.4-6 (embed; bug #555267)
717            - webcalendar <unfixed> (embed; bug #555269)
718            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
719            - jifty 0.90519-1 (embed; bug #555271)
720            - jquery <unfixed> (embed; bug #555272)
721            - passenger 2.2.5debian1-1 (embed; bug #555273)
722            - plone3 <unfixed> (embed; bug #555275)
723            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
724            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
725            - xulrunner <unfixed> (embed)
726            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
727    
728    gdb
729            - insight <unfixed> (embed)
730    
731    e2fsprogs
732            - ldiskfsprogs <unfixable> (fork)
733    
734    quazip (not packaged in Debian)
735            - qcake <unfixed> (embed)
736            NOTE: starting with upstream version 0.6.4
737    
738    exo
739            - pcmanfm <unfixed> (embed; bug #499677)
740            NOTE: slightly modified source code
741    
742    java
743            - openjdk-6 <unfixed>
744            - sun-java5 <unfixed>
745            - sun-java6 <unfixed>
746    
747    libphp-snoopy
748            - ampache 3.4.1-2 (embed; bug #504169)
749            - gforge 4.6.99+svn6094-2 (embed)
750            - mahara 1.0.5-2 (embed; bug #504170)
751            - pixelpost 1.7.1-5 (embed; bug #504171)
752            - mediamate 0.9.3.6-5 (embed; bug #504172)
753            - opendb <removed> (embed; bug #504173)
754            [etch] - opendb <unfixed> (embed; bug #504173)
755            - wordpress 2.5.1-9 (embed; bug #443948)
756            - moodle <unfixed> (embed; bug #507185)
757            [etch] - phpgroupware <unfixed> (embed)
758            NOTE: phpgroupware-felamimail
759            - magpierss 0.72-3 (embed; bug #431089)
760    
761    jquery
762            - zekr <unfixed> (embed)
763            - wordpress <unknown> (embed)
764            - yocto-reader <unfixed> (embed)
765            - textpattern <unfixed> (embed)
766            - genshi 0.5.1-1 (embed)
767            NOTE: compressed file under examples/ dir
768            - prewikka <unfixed> (embed)
769            - libramaze-ruby <unfixed> (embed)
770            - drupal5 <unfixed> (embed)
771            - b2evolution <unfixed> (embed)
772            - wesnoth <unfixed> (embed)
773    
774    tablesorter (jquery plugin, not packaged yet)
775            - wesnoth <unfixed> (embed)
776    
777    kses
778            - wordpress <unfixed> (embed; bug #504242)
779            NOTE: their copy has all methods renamed to wp_<foo>
780            NOTE: kses isn't in Debian, RFP: #504240
781            - moodle <unfixed> (embed; bug #507185)
782            - egroupware <unfixed> (embed)
783    
784    magpierss
785            - wordpress <unfixed> (embed; bug #504242)
786            - moodle <unfixed>
787    
788    php-gettext
789            - wordpress 2.8.4-1 (embed; bug #504242)
790    
791    libphp-ixr (name may change, it is the Incutio XML-RPC)
792            - wordpress <unfixed> (embed; bug #504242)
793            NOTE: libphp-ixr isn't in Debian, RFP: #504236
794            - dokuwiki <unfixed> (embed)
795            - textpattern <unfixed> (embed)
796    
797    libphp-cas
798            - glpi <unfixed> (embed)
799            - moodle <unfixed> (embed; bug #505984)
800    
801    scriptaculous (prototype.js is among the embeds in the following)
802            - glpi <unfixed> (embed)
803            - libaws <unfixed> (embed; bug #555222)
804            - op-panel <unfixed> (embed)
805            - symfony <unfixed> (embed)
806            NOTE: maintainer says there are extra incompatible changes required
807            - pixelpost 1.7.1-6 (embed)
808            - webhelpers <unfixed> (embed)
809            - qwik <unfixed> (embed; bug #555241)
810            - smokeping <unfixed> (embed)
811            - turba2 <unfixed> (embed)
812            - typo3-src 4.2.3-1 (embed)
813            - request-tracker3.6 <unfixed> (embed)
814            - request-tracker3.8 <unfixed> (embed)
815            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
816            - wordpress 2.5.0-2 (embed)
817            - libhtml-prototype-perl 1.48-3 (embed)
818    
819    libmarkdown-php
820            - moodle <unfixed> (embed; bug #507185)
821            - pixelpost 1.7.1-6 (embed)
822    
823    php-openid
824            - wordpress-openid <itp> (embed)
825    
826    geshi
827            - dokuwiki 0.0.20080505-3.1 (embed)
828            - pgfouine 1.0-1.1 (embed)
829            - websvn 2.1.0-1 (embed)
830    
831    webcalendar
832            - gforge 4.7~rc2-6 (embed; bug #504758)
833    
834    libical
835            - kdepim <unfixed> (fork)
836            - kdepimlibs <unfixed> (fork)
837            NOTE: fixed in KDE4 post 4.1.x series
838            - claws-mail-extra-plugins <unfixed> (fork)
839    
840    libltdl3
841            - kdelibs <unfixed> (embed)
842            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
843            - synfig <unfixed> (embed)
844    
845    harfbuzz
846            - qt4-x11 <unfixed> (embed)
847    
848    libzip
849            - php5 <unfixed> (fork)
850            - odt2txt <unfixed> (embed; bug #523808)
851    
852    json.php (not packaged; should be replaced with php's built-in functions)
853            - moodle <unfixed>
854            - yui <unfixed>
855            - gallery2 <unfixed>
856            - dokuwiki <unfixed>
857            - typo3-src <unfixed>
858    
859    php-fpdf
860            - tcpdf <itp> (fork)
861            - moodle <unfixed>
862            - phpwiki <unfixed>
863            - egroupware <unfixed>
864            - ldap-account-manager <unfixed> (fork)
865    
866    tcpdf (itp: #495985)
867            - moodle <unfixed>
868            - phpmyadmin <unfixed>
869    
870    typo3
871            - moodle <unfixed>
872    
873    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
874            - moodle <unfixed>
875            - gosa <unfixed>
876    
877    php-ole (itp: #487558)
878            - moodle <unfixed>
879    
880    pieforms (http://www.catalyst.net.nz)
881            - mahara <unfixed>
882    
883    savant2 (http://phpsavant.com)
884            - egroupware <unfixed>
885    
886    rssparser (http://nwow.org)
887            - egroupware <unfixed>
888            - phpgroupware <unfixed>
889    
890    lcms
891            - openjdk-6 <unfixed> (fork)
892    
893    libphp-phplayersmenu
894            - diogenes <unfixed>
895            - phpldapadmin <unfixed>
896    
897    libphp-pclzip
898            - docvert <unfixed>
899            - moodle <unfixed>
900            - egroupware <unfixed>
901    
902    libphp-simplepie
903            - dokuwiki <unfixed>
904    
905    libphp-jpgraph
906            - egroupware <unfixed>
907    
908    php-simpletest
909            - moodle <unfixed>
910    
911    libpng
912            - iceweasel <not-affected> (uses xulrunner)
913            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
914            - iceape 1.0.13~pre080614i-0etch1 (embed)
915            - xulrunner 1.9.0.13-1 (embed)
916            [lenny] - xulrunner 1.9.0.11-0lenny1
917            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
918            - gamera 3.2.3-1 (embed)
919    
920    irssi
921            - silc-client <unfixed> (embed)
922            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
923    
924    extc
925            - mtasc <unfixed> (embed)
926            - haxe <unfixed> (embed)
927    
928    swflib
929            - mtasc <unfixed> (embed)
930            - haxe <unfixed> (embed)
931    
932    libitext-java
933            - bouncycastle 2.1.4-1 (embed)
934    
935    python-ply
936            - pyke <unfixed> (embed; bug #555363)
937            - pywbem <unfixed> (embed; bug #555364)
938            - sepolgen <unfixed> (embed; bug #555365)
939            - zope-textindexng3 <unknown> (embed)
940            - iceweasel <not-affected> (uses xulrunner)
941            - xulrunner <unknown> (embed)
942            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
943    
944    libdumbnet (libdnet upstream)
945            - nmap <unfixed> (fork)
946    
947    gcc-4.4
948            - gcc-mingw32 <unfixed> (embed)
949    
950    camlimages
951            - advi <unfixed> (static; bug #550441)
952    
953    memcached
954            - memcachedb <unfixed> (embed)
955    
956    yajl
957            - argyll <unfixed> (embed; bug #544223)
958            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
959    
960    nusoap
961            - gforge 4.8.2-1 (embed)
962    
963    libept
964            - adept <unfixed> (embed; bug #540649)
965    
966    libvorbis
967            - iceweasel <not-affected> (uses xulrunner)
968            - xulrunner <unfixed> (embed; bug #540959)
969            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
970            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
971            - iceape <unfixed> (embed)
972            [etch] - iceape <not-affected> (introduced in 2.0)
973            [lenny] - iceape <not-affected> (introduced in 2.0)
974    
975    cairo
976            - iceweasel <not-affected> (uses xulrunner)
977            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
978    
979    liboggz
980            - iceweasel <not-affected> (uses xulrunner)
981            - xulrunner <unfixed> (embed; bug #540959)
982            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
983            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
984            - iceape <unfixed> (embed)
985            [etch] - iceape <not-affected> (introduced in 2.0)
986            [lenny] - iceape <not-affected> (introduced in 2.0)
987    
988    liboggplay
989            - iceweasel <not-affected> (uses xulrunner)
990            - xulrunner <unfixed> (embed; bug #540959)
991            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
992            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
993            - iceape <unfixed> (embed)
994            [etch] - iceape <not-affected> (introduced in 2.0)
995            [lenny] - iceape <not-affected> (introduced in 2.0)
996    
997    php-net-dnsbl
998            - serendipity <unfixed> (embed)
999    
1000    php-onyx-rss
1001            - serendipity <unfixed> (embed)
1002    
1003    php-text-wiki
1004            - serendipity <unfixed> (embed)
1005    
1006    php-xml-rpc
1007            - serendipity <unfixed> (embed)
1008    
1009    polarssl (does not have a shared library)
1010            - pdkim <itp> (embed; bug #543150)
1011            - xyssl <unfixed> (old-version)
1012    
1013    pidgin
1014            - gaim <removed> (old-version)
1015    
1016    icu
1017            - webkit 1.0.1-1 (embed; bug #547214)
1018            - texlive-bin <unfixed> (fork)
1019            NOTE: texlive upstream working with icu upstream to merge their changes
1020    
1021    cyrus-imapd-2.2
1022            - kolab-cyrus-imapd <unfixed> (fork)
1023            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1024    
1025    python-cxx-dev
1026            - freecad <unfixed> (embed; bug #547936)
1027    
1028    libzipios++-dev
1029            - freecad <unfixed> (embed; bug #547941)
1030    
1031    linux-2.6
1032            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
1033            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1034            - kernel-source-2.6.8 <removed> (old-version)
1035            - kernel-source-2.4.27 <removed> (old-version)
1036            - kernel-source-2.4.24 <removed> (old-version)
1037            - kernel-source-2.2.25 <removed> (old-version)
1038            - kernel-source-2.2.20 <removed> (old-version)
1039    
1040    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1041            - kvm <unfixed> (embed) [./libfdt/*]
1042    
1043    qweb (not packaged)
1044            - ajaxterm <unfixed>
1045    
1046    opensaml2
1047            - opensaml <removed> (old-version)
1048    
1049    shibboleth-sp2
1050            - shibboleth-sp <removed> (old-version)
1051    
1052    tuxonice-userui
1053            - suspend2-userui <removed> (old-version)
1054    
1055    expat
1056            - w3c-libwww <removed> (embed; bug #551941)
1057            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1058            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1059            - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1060            - python2.4 <unfixed> (embed; bug #553403)
1061            - wxwindows2.4 <removed> (embed)
1062            - wxwidgets2.6 <unfixed> (embed)
1063            - wxwidgets2.8 <unfixed> (embed)
1064            - celementtree <unfixed> (embed)
1065            - audacity <unfixed> (embed)
1066            - matanza <unfixed> (embed)
1067            - tdom <unfixed> (embed)
1068            - udunits <unfixed> (embed)
1069            - apr-util 1.2 (embed)
1070            - ayttm <unfixed> (embed)
1071            - cableswig <unfixed> (embed)
1072            - cadaver <unfixed> (embed)
1073            - cmake <unfixed> (embed)
1074            - coin3 <unfixed> (embed)
1075            - gdcm <unfixed> (embed)
1076            - ghostscript <unfixed> (embed)
1077            - grmonitor <unfixed> (embed)
1078            - iceape <unfixed> (embed)
1079            - insighttoolkit <unfixed> (embed)
1080            - libparagui1.1 <unfixed> (embed)
1081            - paraview <unfixed> (embed)
1082            - poco <unfixed> (embed)
1083            - simgear <unfixed> (embed)
1084            - sitecopy <unfixed> (embed)
1085            - smart 1.0-1 (embed)
1086            [etch] - smart <unfixed> (embed)
1087            - swish-e <unfixed> (embed)
1088            - tla <unfixed> (embed)
1089            - vtk <unfixed> (embed)
1090            - wbxml2 <unfixed> (embed)
1091            - xmlrpc-c <unfixed> (embed)
1092            - iceweasel <unfixed> (embed)
1093            - kompozer <unfixed> (embed)
1094            - vxl <unfixed> (embed)
1095            - xulrunner <unfixed> (embed)
1096            - apache2 2.2 (embed)
1097            - texlive-bin <unfixed> (embed) [included twice]
1098            - vnc4 <unfixed> (embed)
1099            - xotcl <unfixed> (embed)
1100    
1101    xerces-c
1102            - xerces-c2 <unfixed> (old-version)
1103            - xerces27 <removed> (old-version)
1104    
1105    md5 (RSA's version; not the gnu version provided by coreutils)
1106            - w3c-libwww <removed> (embed; bug #551942)
1107            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1108    
1109    enet
1110            - sauerbraten <unfixed> (embed; #497194)
1111    
1112    eglibc
1113            - glibc <removed> (old-version)
1114    
1115    galib
1116            - gamera 3.2.3-1 (embed)
1117    
1118    configobj
1119            - bzr <unfixed> (embed; bug #555336)
1120            - elisa <unfixed> (embed; bug #555337)
1121            - gaupol <unfixed> (embed; bug #555338)
1122            - ipython <unfixed> (embed; bug #555339)
1123            - pida <unfixed> (embed; bug #555340)
1124            - psychopy <unfixed> (embed; bug #555341)
1125            - rest2web <unfixed> (embed; bug #555342)
1126            - auth2db <unknown> (embed)
1127            - dynagen <unknown> (embed)
1128            - iceweasel <unknown> (embed)
1129            - sabnzbdplus <unknown> (embed)
1130            - xulrunner <unknown> (embed)
1131            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1132    
1133    python-clientform
1134            - bibus <unfixed> (embed; bug #555332)
1135            - zope2.10 <unfixed> (embed; bug #555333)
1136            - zope2.11 <unfixed> (embed; bug #555334)
1137            - python-mechanize <unknown> (embed)
1138            - twill <unknown> (embed)
1139    
1140    python-mechanize
1141            - zope2.10 <unfixed> (embed; bug #555337)
1142            - zope2.11 <unfixed> (embed; bug #555338)
1143            - twill <unknown> (embed; bug #555339)
1144    
1145    pexpect
1146            - duplicity 0.6.06-1 (embed; bug #555361)
1147            - hplip <unfixed> (embed; bug #555362)
1148            - smart <unfixed> (embed; bug #555363)
1149    
1150    pyparsing
1151            - bauble <unfixed> (embed; bug #555366)
1152            - boa-constructor 0.6.1-8 (embed; bug #555367)
1153            - calibre <unfixed> (embed; bug #555368)
1154            - matplotlib <unfixed> (embed; bug #531024)
1155            - zhpy <unfixed> (embed; bug #555370)
1156            - polybori <unknown> (embed)
1157            - python-whoosh <unknown> (embed)
1158            - twill <unknown> (embed)
1159            - zope-textindexng3 <unknown> (embed)
1160    
1161    python-pysqlite2
1162            - python2.4 <unfixed> (embed; bug #553403)
1163            - python2.5 <unfixed> (embed; bug #553403)
1164    
1165    celementtree
1166            - python2.5 <unfixed> (embed)
1167            - smart 1.0-1 (embed)
1168            [etch] - smart <unfixed> (embed)
1169    
1170    elementtree
1171            - python2.5 <unfixed> (embed)
1172            - bzr <unfixed> (embed; bug #555343)
1173            - gedit 2.28.2-1 (embed; bug #555344)
1174            - smart 1.0-1 (embed)
1175            [etch] - smart <unfixed> (embed)
1176            - solfege <unfixed> (embed; bug #555345)
1177            - w3af <unfixed> (embed; bug #555346)
1178            - python-qt4 <unknown> (embed)
1179            - sphinx <unknown> (embed)
1180            - python-nltk <itp> (embed)
1181    
1182    python2.5
1183            - python2.4 <unfixed> (old-version)
1184            - jython <unfixed> (embed)
1185            NOTE: embeds many stdlib modules
1186            - python-django <unfixed> (embed; bug #555419)
1187            NOTE: embeds stdlib modules: doctest, decimal
1188            - gamera 3.2.3-1 (embed)
1189            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1190            - boa-constructor <unfixed> (embed; bug #555426)
1191            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1192            - nicotine <unfixed> (embed; bug #555427)
1193            NOTE: embeds stdlib modules: ConfigParser
1194            - museek+ <unfixed> (embed; bug #555428)
1195            NOTE: embeds stdlib modules: ConfigParser
1196            - vegastrike-data <unfixed> (embed)
1197            NOTE: embeds many stdlib modules
1198            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1199            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1200            - config-manager <unfixed> (embed; bug #555423)
1201            NOTE: embeds stdlib modules: optparse
1202            - jhbuild 2.28.0-1 (embed; bug #555421)
1203            NOTE: embeds stdlib modules: optparse, subprocess
1204            - smart <unfixed> (embed; bug #555432)
1205            NOTE: embeds stdlib modules: optparse
1206            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1207            NOTE: embeds stdlib modules: doctest
1208            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1209            NOTE: embeds stdlib modules: doctest
1210            - distribute <unfixed> (embed)
1211            NOTE: embeds stdlib modules: doctest
1212            - python-setuptools <unfixed> (embed; bug #555435)
1213            NOTE: embeds stdlib modules: doctest
1214            - zope.testing <unfixed> (embed; bug #555436)
1215            NOTE: embeds stdlib modules: doctest
1216            - translate-toolkit <unfixed> (embed; bug #555422)
1217            NOTE: embeds stdlib modules: textwrap, contextlib
1218            - libtpclient-py <unfixed> (embed; bug #555424)
1219            NOTE: embeds stdlib modules: subprocess
1220            - grass <unfixed> (embed; bug #555425)
1221            NOTE: embeds stdlib modules: subprocess
1222            - coherence <unfixed> (embed; bug #555429)
1223            NOTE: embeds stdlib modules: uuid
1224            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1225            NOTE: embeds stdlib modules: uuid
1226            - setroubleshoot <unfixed> (embed; bug #555431)
1227            NOTE: embeds stdlib modules: uuid
1228            - linkchecker <unfixed> (embed; bug #555414)
1229            NOTE: embeds msgfmt.py script
1230            - imdbpy <unfixed> (embed)
1231            NOTE: embeds msgfmt.py script
1232            - kiwi <unfixed> (embed)
1233            NOTE: embeds msgfmt.py script
1234            - moin <unfixed> (embed)
1235            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1236            - plone3 <unfixed> (embed)
1237            NOTE: embeds msgfmt.py script
1238            - roundup <unfixed> (embed)
1239            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1240            - rednotebook <unfixed> (embed; bug #555415)
1241            NOTE: embeds msgfmt.py script
1242            - turbogears <unfixed> (embed)
1243            NOTE: embeds msgfmt.py script
1244            - elisa <unfixed> (embed)
1245            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1246            - calibre <unfixed> (embed)
1247            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1248            - mailman <unfixed> (embed; #555416)
1249            NOTE: embeds msgfmt.py script
1250            - python-docutils <unknown> (embed)
1251            NOTE: embeds stdlib modules: optparse, textwrap
1252            - python-imaging <unknown> (embed)
1253            NOTE: embeds stdlib modules: doctest
1254            - python-mechanize <unknown> (embed)
1255            NOTE: embeds stdlib modules: doctest
1256            - twill <unknown> (embed)
1257            NOTE: embeds stdlib modules: subprocess
1258            - zeroc-ice <unknown> (embed)
1259            NOTE: embeds stdlib modules: subprocess
1260            - wxwidgets2.8 <unknown> (embed)
1261            NOTE: embeds stdlib modules: subprocess
1262            - cycle <unknown> (embed)
1263            NOTE: embeds msgfmt.py script
1264            - deluge <unknown> (embed)
1265            NOTE: embeds msgfmt.py script
1266            - opendict <unknown> (embed)
1267            NOTE: embeds msgfmt.py script
1268            - openerp-client <unknown> (embed)
1269            NOTE: embeds msgfmt.py script
1270            - rapidsvn <unknown> (embed)
1271            NOTE: embeds msgfmt.py script
1272            - wammu <unknown> (embed)
1273            NOTE: embeds msgfmt.py script
1274            - gaphor <unknown> (embed)
1275            NOTE: embeds msgfmt.py script
1276            - pida <unknown> (embed)
1277            NOTE: embeds msgfmt.py script
1278            - python-formencode <unknown> (embed)
1279            NOTE: embeds msgfmt.py script
1280            - duplicity <unfixed> (embed)
1281            NOTE: embeds stdlib module: urlparse, tarfile
1282            - pygopherd <unfixed> (embed)
1283            NOTE: embeds stdlib module: zipfile
1284    
1285    argparse
1286            - twill <unfixed> (embed; bug #555347)
1287            - ipython <unfixed> (embed; bug #555348)
1288    
1289    coherence
1290            - elisa <unfixed> (embed; bug #555335)
1291    
1292    simpletal
1293            - plastex <unfixed> (embed; bug #555371)
1294    
1295    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1296            - postr <unfixed> (embed)
1297            - elisa <unfixed> (embed)
1298    
1299    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1300            - apertium-tolk <unfixed> (embed)
1301            - ipython <unfixed> (embed)
1302            - virtaal <unfixed> (embed)
1303    
1304    distribute
1305            - setuptools <removed> (old-version)
1306    
1307    rails
1308            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1309            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1310            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1311            - thin <unfixed> (embed) [./spec/rails_app/*]
1312            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1313            NOTE: be dangerous if developers are naively basing their code off of the examples
1314            NOTE: prototype.js is among the example files
1315    
1316    lucene2 (prototype.js is among the embeds in the following)
1317            - lucene <unfixed> (old-version)
1318            - pylucene <unfixed> (embed)
1319            - libpdfbox-java <unfixed> (embed)
1320            - libfontbox-java <unfixed> (embed)
1321            - libjempbox-java <unfixed> (embed)
1322            - solr <unfixed> (embed)
1323    
1324    unicode-data
1325            - syslinux <unfixed> (embed)
1326            - camomile <unfixed> (embed)
1327            - fribidi <unfixed> (embed)
1328            - m17n-db <unfixed> (embed)
1329            - sbcl <unfixed> (embed)
1330            - heimdal <unfixed> (embed)
1331            - icu <unfixed> (embed)
1332            - icu4j <unfixed> (embed)
1333            - krb5 <unfixed> (embed)
1334            - moodle <unfixed> (embed)
1335            - openldap <unfixed> (embed)
1336            - pike7.6 <unfixed> (embed)
1337            - samba <unfixed> (embed)
1338            - samba4 <unfixed> (embed)
1339            - cmucl <unfixed> (embed)
1340            - typo3-src <unfixed> (embed)
1341            - mauve <unfixed> (embed)
1342            - texlive-bin <unfixed> (embed)
1343            - ypsilon <unfixed> (embed)
1344            - jeuclid <unfixed> (embed)
1345            - charmap.app <unfixed> (embed)
1346            - clisp <unfixed> (embed)
1347            - gnulib <unfixed> (embed)
1348            - opensrs-client <unfixed> (embed)
1349            - saxonb <unfixed> (embed)
1350            - rails <unfixed> (embed)
1351    
1352    feedparser
1353            - rawdog <unfixed> (embed; bug #383422)
1354            - miro <unfixed> (embed; bug #555351)
1355            - calibre <unfixed> (embed; bug #555352)
1356            - freevo <unfixed> (embed; bug #555353)
1357            - pida <unfixed> (embed; bug #555354)
1358            - planet-venus <unfixed> (embed; bug #555355)
1359            - plone3 <unfixed> (embed; bug #555356)
1360            - exaile 0.2.14+debian-1 (embed)
1361            - screenlets 0.1.2-3 (embed)
1362            NOTE: included twice
1363    
1364    agg:
1365            - matplotlib <unfixed> (embed: bug #377271)
1366            - contextfree <unfixed> (embed)
1367            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1368            - exactimage <unfixed> (embed)
1369            - python-enable <unfixed> (embed)
1370            - mapnik 0.5.1-3 (embed)
1371            NOTE: links statically to agg, but shared library is not available (bug #377271)
1372    
1373    vtk
1374            - paraview <unfixable> (embed; bug #495426)
1375    
1376    txt2tags
1377            - rednotebook <unfixed> (embed)
1378    
1379    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1380            - gajim <unfixed> (embed)
1381            - emesene <unfixed> (embed)
1382            - convirt <unfixed> (embed)
1383            - pida <unfixed> (embed)
1384            - rednotebook <unfixed> (embed)
1385    
1386    horde3 (prototype.js is among the embeds in the following)
1387            - mnemo2 <unfixed> (embed)
1388            - nag2 <unfixed> (embed)
1389    
1390    cimg
1391            - gmic <itp> (embed)
1392    
1393    mootools
1394            - gmic <itp> (embed)
1395    
1396    openldap
1397            - openldap2.3 <removed> (old-version)
1398    
1399    grub2
1400            - grub <unfixed> (old-version)
1401    
1402    gnupginterface
1403            - duplicity <unfixed> (embed)
1404    
1405    python-dateutil
1406            - awn-extras-applets <unfixed> (embed)
1407            - matplotlib <unknown> (embed)
1408    
1409    cups
1410            - cupsys <removed> (old-version)
1411    
1412    yui
1413            - bcfg2 <not-affected> (present in source but not included in any binary files)
1414            - serendipity <unfixed> (embed; bug #557746)
1415            - moodle 1.8.2.dfsg-5 (embed)
1416            - jifty <unfixed> (embed; bug #557748)
1417            - webgui 7.7.26-1 (embed)
1418            - loggerhead 1.17-1 (embed)
1419    
1420    quake3 (vanilla source not packaged in debian)
1421            - openarena <unfixable> (fork)
1422    
1423    quake2 (vanilla source not packaged in debian)
1424            - alien-arena <unfixable> (fork)
1425            - warsow <unfixable> (fork)
1426    
1427    libtheora
1428            - iceweasel <not-affected> (uses xulrunner)
1429            - xulrunner <unfixed> (embed; bug #540959)
1430            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1431            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1432            - iceape <unfixed> (embed; bug #559276)
1433            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1434            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1435    
1436    dtoa
1437            - bfilter <unfixed> (embed)
1438            - cacao <unfixed> (embed)
1439            - cdrdao <unfixed> (embed)
1440            - classpath <unfixed> (embed)
1441            - freej <unfixed> (embed)
1442            - iceape <unfixed> (embed)
1443            - iceweasel <unfixed> (embed)
1444            - jscoverage <unfixed> (embed)
1445            - kde4libs <unfixed> (embed)
1446            - kdelibs <unfixed> (embed)
1447            - kompozer <unfixed> (embed)
1448            - libv8 <unfixed> (embed)
1449            - mono <unfixed> (embed)
1450            - newlib <unfixed> (embed)
1451            - nspr <unfixed> (embed)
1452            - php5 <unfixed> (embed)
1453            - polyml <unfixed> (embed)
1454            - qt4-x11 <unfixed> (embed)
1455            - rhino <unfixed> (embed)
1456            NOTE: code translated to Java
1457            - ruby1.8 <unfixed> (embed)
1458            - ruby1.9 <unfixed> (embed)
1459            - ruby1.9.1 <unfixed> (embed)
1460            - sdd <unfixed> (embed)
1461            - sfind <unfixed> (embed)
1462            - star <unfixed> (embed)
1463            - tinymux <unfixed> (embed)
1464            - virtualbox-ose <unfixed> (embed)
1465            - webkit <unfixed> (embed)
1466            - xulrunner <unfixed> (embed)
1467    
1468    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1469            - firegpg <unfixed> (embed)
1470            - enigmail <unfixed> (embed)

Legend:
Removed from v.1588  
changed lines
  Added in v.13447

  ViewVC Help
Powered by ViewVC 1.1.5