/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 8523 by nion, Sun Apr 13 11:19:23 2008 UTC revision 13447 by gilbert-guest, Fri Dec 4 02:29:41 2009 UTC
# Line 11  Format: Line 11  Format:
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>,  status: version number fixing the embedded copy, <unfixed>, <removed>,
14          <itp> or <unknown> if the version number can not be determined          <itp>, <not-affected>, <unknown> if the version number can not
15          <unfixable> for unavoidable cases (e.g., forks that add real value)          be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embedding a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and        fork (the package is not just embedding code but it is a fork and
# Line 27  Everything up to the next line is ignore Line 28  Everything up to the next line is ignore
28  ---BEGIN  ---BEGIN
29  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
31          - pdftohtml <unknown>          - pdftohtml <unknown>
32          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
33          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
34          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
35          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
37          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
38          NOTE: links to poppler          NOTE: links to poppler
39          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
40          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
41          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
42          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
43          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
45          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50  ppmd  ppmd
51          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59    
60  peercast  peercast
61          - gnome-peercast <unfixed> (embed)          - gnome-peercast <removed> (embed)
62          NOTE: gnome-peercast may better be removed, see #466539          [etch] - gnome-peercast <unfixed> (embed)
63    
64  silc-toolkit  silc-toolkit
65          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
66    
67    icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71  dietlibc  dietlibc
72          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
73    
74    libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78  libiax  libiax
79          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
80    
81    spandsp
82            - iaxmodem <unfixable> (embed; bug #548885)
83    
84  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85          - dpkg <unfixed> (embed)          - dpkg <unfixed> (embed)
# Line 77  zlib (lots of apps embed a copy, but lin Line 93  zlib (lots of apps embed a copy, but lin
93          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
94          - rpm <unknown> (embed)          - rpm <unknown> (embed)
95          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
96            - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98            - tra <unfixed>
99            - sash <unfixed>
100            - nsis <unfixed>
101            - mseide-msegui <unfixed>
102            NOTE: mseide
103            - mirrordir <unfixed>
104            - poco <unfixed>
105            - klibc <unfixed>
106            - ghostscript <unfixed>
107            - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112            - perl <unfixed>
113            - paraview <unfixed>
114            - gcvs <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125            - gamera 3.2.3-1 (embed)
126            - python2.4 <unfixed> (embed; bug #553403)
127            - python2.5 <unfixed> (embed; bug #553403)
128    
129    dulwich
130            - hg-git 0.1.0-1 (embed; bug #541996)
131    
132    libvigraimpex
133            - hugin <unfixed> (embed; bug #542259)
134            - enblend-enfuse <unfixed> (embed; bug #542258)
135            - gamera 3.2.3-1 (embed)
136    
137  libbz2  libbz2
138          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
139    
140  ekg  libgadu
141          - centericq <unfixed> (embed)          - centericq <unfixed> (embed)
142          - gaim <unfixed> (embed)          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144          - kopete 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
145          - kadu <unfixed> (embed)          NOTE: from kdenetwork: kopete
146          - gadu <unfixed> (embed)          - ekg 1:1.8~rc0-1 (embed)
147          NOTE: g/kadu not packaged in Debian yet          - kadu 0.6.0.2-3 (embed; bug #504430)
148            - gadu <itp> (embed)
149    
150  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
151          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
152          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
153          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
154          - phpwiki (embed)          - phpwiki <unfixed> (embed)
155          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
156          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157    
# Line 102  shtool (affects build-time only) Line 159  shtool (affects build-time only)
159          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
160          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
161    
162  mozilla source code  iceape
163          - mozilla-firefox <unfixed> (embed)          - iceweasel <unfixed> (fork)
164          - mozilla-thunderbird          - icedove <unfixed> (fork)
165          - firefox <removed>          - xulrunner <unfixed> (fork)
166          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
167          - thunderbird <removed>          - galeon <unfixed> (fork)
168          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser <unfixed> (fork)
169          - iceweasel <unfixed> (embed)          - conkeror <unfixed> (fork)
170          - iceape <unfixed> (embed)          - kazehakase <unfixed> (fork)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
171    
172  xli  xli
173          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
174    
175  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
176          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
177          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed)
         NOTE: in libxpm  
178    
179  kerberized apps with BSD origin  kerberized apps with BSD origin
180          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
181          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
182          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
183    
184  grip (which pkg is the origin?)  grip (which pkg is the origin?)
185          - libcdaudio          - libcdaudio <unfixed>
186          - grip          - grip <unfixed>
187          - gnome-vfs          - gnome-vfs <unfixed>
188          TODO: check vfs2 as well          TODO: check vfs2 as well
189    
190  fudforum  fudforum
191          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
192          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
193          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
194    
195    libbsd
196            - rdate 1:1.2-3 (embed)
197            - atheme-services <unfixed>
198            - libbsd-arc4random-perl <unfixed>
199            - isakmpd <unfixed>
200    
201  cvs  cvs
202          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
203          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
204    
205  pcre  pcre3
         - python* <unfixed> (embed)  
206          - php4 <unknown> (embed)          - php4 <unknown> (embed)
207          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
208          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
209            NOTE: libgoffice-*
210          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
211          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
212          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
213          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
214          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
215          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
216          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
217          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
218          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
219          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
220          - tin <unknown> (embed)          - tin 980117-1 (embed)
221            - kazehakase 0.5.2-1
222            - webkit 1.0.1-1 (embed)
223            - qt4-x11 <unfixed> (embed)
224            NOTE: embedded via webkit copy
225            - erlang <unfixed> (embed)
226    
227  tiff  tiff
228          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
229          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
230    
231  uudeview  uudeview
232          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
233            - pan <unfixed> (embed)
234    
235  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
236          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
237          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
238          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
239    
240  util-linux/mount  util-linux/mount
241          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
242          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
243    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
244  sylpheed  sylpheed
245          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
246    
# Line 195  phpldapadmin Line 255  phpldapadmin
255  chmlib  chmlib
256          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
257    
258  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
259          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
260          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
261          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
262          - vlc <unfixed> (static)          - smilutils 0.3.0-10
263          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
264          - motion <unfixed> (static)          - motion 3.1.19-1
265          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
266          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed> (static)
         - xmovie <unfixed>  
267          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
268            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
269    
270    faad2
271            - mplayer 1.0~rc2-20 (embed)
272            - avifile <unfixed> (embed; bug #538750)
273            - ffmpeg-debian <removed> (old-version)
274    
275  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
276          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
277            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
278            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
279    
280  libdts  libdts
281          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 225  libmpeg2 Line 291  libmpeg2
291          - mpeg2dec <unfixed> (embed)          - mpeg2dec <unfixed> (embed)
292          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
293    
294  curl  libntlm
295          - wget <unfixed> (embed)          - wget <unfixed> (fork; bug #550436)
296          NOTE: code for NTLM authentication          - curl <unfixed> (fork; bug #550437)
297            - cntlm <unfixed> (fork; bug #550438)
298    
299  uw-imap  uw-imap
300          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 236  uw-imap Line 303  uw-imap
303  imagemagick  imagemagick
304          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
305    
306    python-urlgrabber
307            - mercurial <unfixed> (embed; bug #531062)
308            - w3af <unfixed> (embed; bug #555372)
309            [experimental] - harvestman <unfixed> (embed; bug #555373)
310    
311    beautifulsoup
312            - python-mechanize <unfixed> (embed; bug #555349)
313            - zope2.11 <unfixed> (embed; bug #555350)
314            - twill <unknown> (embed)
315    
316  halibut  halibut
317          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
318    
319  libghttp  libghttp
320          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
321    
322  libsndfile  libsndfile
323          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
324    
325  glibmm2.4  glibmm2.4
326          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
327    
328  libgnomecanvasmm2.6  libgnomecanvasmm2.6
329          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
330    
331  libsigc++-2.0  libsigc++-2.0
332          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
333    
334  soundtouch  soundtouch
335          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
336    
337  libmms  libmms
338          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 263  libmms Line 340  libmms
340    
341  fckeditor  fckeditor
342          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
343          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
344          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
345          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
346            - request-tracker3.8 <unfixed> (embed)
347    
348  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
349          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
350    
351  libphp-phpmailer  libphp-phpmailer
352          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
353            - mahara <unfixed> (embed)
354            - symfony <unfixed> (embed)
355            [etch] - phpgroupware <unfixed> (embed)
356            NOTE: phpgroupware-felamimail is only in etch
357            - egroupware <unfixed> (embed; bug #504283)
358            - glpi <unfixed>
359    
360  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
361          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
362    
363  giflib:  giflib
364          - wine <unfixed> (embed; bug #466181)          - wine <unfixed> (embed; bug #466181)
365    
366  bennu (not packaged in Debian)  bennu (not packaged in Debian, http://bennu.sourceforge.net)
367          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
368    
369  smarty:  smarty
370          - moodle <unfixed> (embed; bug #471158)          - moodle 1.8.2-2 (embed; bug #471158)
371          - gallery2 <unfixed> (embed; bug #471160)          - gallery2 2.2.5-2 (embed; bug #471160)
372          - mahara 0.9.2-2 (embed; bug #471201)          - mahara 0.9.2-2 (embed; bug #471201)
373          - gosa 2.4beta1-1 (embed; bug #471200)          - gosa 2.4beta1-1 (embed; bug #471200)
374    
375  TinyMCE  TinyMCE
376          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
377          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
378          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
379          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
380    
381  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
382          - scite <unfixed> (embed)          - scite <unfixed> (embed)
383          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
384          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
385          - geany <unfixed> (embed)          - geany <unfixed> (fork)
386            - anjuta <unfixed> (embed)
387    
388  libphp-adodb  libphp-adodb
389          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
390          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
391          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
392          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
393          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
394          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
395            - torrentflux 2.0beta1-2 (embed)
396          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
397          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
398          - cacti <unknown> (embed)          - cacti <unknown> (embed)
399          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
400          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
401            - gforge 4.7~rc2-6 (embed)
402            - mahara <unfixed> (embed)
403    
404  gzip  gzip
405          - linux-kernel <unfixed> (embed)          - linux-kernel <unfixed> (embed)
# Line 322  gzip Line 409  gzip
409          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
410    
411  neon  neon
412          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
413          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
414          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
415            - litmus <removed> (embed; #395875)
416          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
417          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.3-5 (embed; bug #395876)
418          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
419          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
420    
# Line 339  libvncserver Line 427  libvncserver
427  putty  putty
428          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
429    
430  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
431          - filezilla <unfixed>          - filezilla <unfixed>
432            - crystalspace <unfixed> (embed)
433            - libwfut <unfixed> (embed)
434            - rarian <unfixed> (embed)
435            - bulletml <unfixed> (embed)
436            - pokerth <unfixed> (embed)
437            - qutecom <unfixed> (embed)
438            - sofa-framework <unfixed> (embed)
439            - yate <unfixed> (embed)
440            - antigrav <unfixed> (embed)
441            - balder2d <unfixed> (embed)
442            - cal3d <unfixed> (embed)
443            - criticalmass <unfixed> (embed)
444            - ember <unfixed> (embed)
445            - epiphany <unfixed> (embed)
446            - gambit <unfixed> (embed)
447            - noiz2sa <unfixed> (embed)
448            - ogre <unfixed> (embed)
449            - opencity <unfixed> (embed)
450            - openmovieeditor <unfixed> (embed)
451            - pouetchess <unfixed> (embed)
452            - tecnoballz <unfixed> (embed)
453            - trigger-rally <unfixed> (embed)
454            - xmoto <unfixed> (embed)
455            - mapnik <unknown> (embed)
456            NOTE: uses a different XML parser by default
457            - rrootage 0.23a-6 <embed>
458            NOTE: links to libbulltetml
459            - boson <unknown> (embed)
460            NOTE: the embedded code is unused
461    
462  gv  gv
463          - evince <unfixed> (embed)          - evince <unfixed> (embed)
464          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
465          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
466    
467  libXbae  libXbae
468          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
469          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
470    
471    libgtkhtml
472            - claws-mail-extra-plugins <unfixed> (fork)
473    
474  libXaw  libXaw
475          [etch] - libpawlib2-lesstif          - paw <removed> (embed)
476          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
477          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
478    
479  libgd2  libgd2
480          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
481          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
482          - wml <unfixed> (embed)          - wml <unfixed> (embed)
483            - libwmf <unfixed> (embed)
484          NOTE: derived from gd 1.6.3          NOTE: derived from gd 1.6.3
485    
486  rar  rar
# Line 375  mplayer (DirectMedia Object loader) Line 495  mplayer (DirectMedia Object loader)
495          NOTE: src/libw32dll/          NOTE: src/libw32dll/
496          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
497          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
498            - mplayer 1.0~rc2-20 (embed)
499    
500  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
501          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 383  fsplib (http://sourceforge.net/projects/ Line 504  fsplib (http://sourceforge.net/projects/
504          - gftp <unfixed> (embed)          - gftp <unfixed> (embed)
505          NOTE: lib/fsplib version 0.3          NOTE: lib/fsplib version 0.3
506    
507    sprng
508            - tree-puzzle <unfixed> (embed)
509    
510  librpcsecgss  librpcsecgss
511          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
512    
# Line 390  jasper Line 514  jasper
514          - ghostscript <unfixed> (embed)          - ghostscript <unfixed> (embed)
515          - gs-gpl <unfixed> (embed)          - gs-gpl <unfixed> (embed)
516    
517    libiris
518            - psi <unfixed> (embed)
519            - kdenetwork <unfixed> (embed)
520            NOTE: kopete embeds libiris but links dynamically to libidn
521            - kdegames <unfixed> (embed)
522            NOTE: ksirk/kde4
523    
524  libidn  libidn
525          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
526            - psi <unfixed> (embed)
527            NOTE: psi embeds libiris which embeds libidn
528            - kdegames <unfixed> (embed)
529            NOTE: kdegames/kde4 embeds libiris which embeds libidn
530    
531  liblua  liblua
532          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
533            - nmap 5.00-1 (embed; bug #527997)
534            [lenny] - nmap <unfixed> (embed; bug #527997)
535            - ocropus <unfixed> (embed)
536    
537  libbotan  libbotan
538          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
539    
540  NetXX  NetXX
541          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
542    
543  libgc  libgc
544          - mono <unfixed> (embed)          - mono <unfixed> (embed)
545    
546  lzma  lzma
547          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
548            - xz-utils <unfixed> (fork)
549    
550  lzo  lzo
551          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
# Line 429  guichan Line 568  guichan
568  tolua  tolua
569          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
570          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
571            - ocropus <unfixed> (embed)
572            - freeciv <unfixed> (embed)
573    
574  asio-dev  asio-dev
575          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
576    
577  xine-lib  xine-lib
578          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 452  tk8.5 Line 591  tk8.5
591          - perl-tk <unfixable> (fork)          - perl-tk <unfixable> (fork)
592    
593  samba  samba
594          - mc <unfixed> (embed)          - mc 2:4.6.2~git20080311-1 (embed)
595          NOTE: maintainer is aware of this, currently searching a solution          NOTE: maintainer is aware of this, currently searching a solution
596    
597  plib1.8.4c2  plib1.8.4c2
# Line 461  plib1.8.4c2 Line 600  plib1.8.4c2
600    
601  fribidi  fribidi
602          - quesoglc <unfixed> (embed)          - quesoglc <unfixed> (embed)
603            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
604    
605  glew  glew
606          - quesoglc <unfixed> (embed)          - quesoglc <unfixed> (embed; bug #489341)
607            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
608            - trigger <unfixed> (embed)
609            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
610            - trigger-rally <unfixed> (embed)
611            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
612    
613  minorGems  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
614          - transcend <unfixed> (embed)          - transcend <unfixed> (embed)
615          - cultivation <unfixed> (embed)          - cultivation <unfixed> (embed)
616            - passage <unfixed> (embed)
617            - gravitation <unfixed> (embed)
618    
619  libarchive  tar
620          - tar <unfixed> (embed)          - libarchive <unfixed> (embed)
621          NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable          NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
622          - cpio <unfixed> (embed)  
623    cpio
624            - libarchive <unfixed> (embed)
625          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
626    
627  webkit  webkit
628          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
629    
630    ftgl
631            - blender 2.46+dfsg-1 (embed)
632    
633    wv
634            - abiword <unfixed>
635    
636    qemu
637            - kvm <unfixed> (embed; bug #543159)
638            - xen-3 <unfixed> (embed)
639            - xen-unstable <unfixed> (embed)
640    
641    vgabios
642            - kvm <unfixed> (embed; bug #489442)
643    
644    bochs
645            - kvm <unfixed> (embed; bug #489442)
646    
647    speex
648            - vorbis-tools <unfixed> (embed)
649            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
650            - gst-plugins-good0.10 <unfixed> (embed)
651            - xine-lib <unfixed> (embed)
652            - libfishsound <unfixed> (embed)
653            - libannodex <unfixed> (embed)
654            - vlc <unfixed> (embed)
655            - xmms-speex <unfixed> (embed)
656            - libsdl-sound1.2 <unfixed> (embed)
657            - sweep <unfixed> (embed)
658    
659    libreadline
660            - magic <itp> (old-version)
661    
662    opcode
663            - ode <unfixed> (embed)
664            NOTE: opcode is not a package in debian, it is just embedded
665            NOTE: http://www.codercorner.com/Opcode.htm
666    
667    gimpact
668            - ode <unfixed> (embed)
669            NOTE: gimpact is not a package in debian, it is just embedded
670            NOTE: http://gimpact.sf.net
671    
672    mochikit
673            - mahara <unfixed> (embed)
674            NOTE: they require extra patches, still unmerged upstream
675            - ntop <unfixed> (embed)
676            - coherence 0.6.2-1 (embed)
677            - paste <unfixed> (embed)
678            - turbogears <unfixed> (embed)
679            - plone3 <unfixed> (embed)
680            - xulrunner <unfixed> (embed)
681            - libjifty-plugin-chart-perl <unfixed> (embed)
682            - sabnzbdplus <unfixed> (embed)
683            - tgmochikit <unfixed> (embed)
684    
685    prototypejs
686            - netbeans-ide 6.0.1+dfsg-2 (embed)
687            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
688            - webcit <unfixed> (embed; bug #555219)
689            - asterisk 1:1.6.2.0~rc3-1 (embed)
690            - libjson-ruby 1.1.4-1 (embed; bug #555224)
691            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
692            - horde3 <unfixed> (embed)
693            - knowledgeroot <unfixed> (embed; bug #555230)
694            - mediatomb <unfixed> (embed; bug #555233)
695            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
696            - ebug-http <unfixed> (embed; bug #555236)
697            - phpgedview <removed> (embed)
698            - poker-network <unfixed> (embed; bug #555238)
699            - rails 2.1.0-6 (embed)
700            - wordpress 2.5.0-2 (embed; bug #555243)
701            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
702            TODO: search through all of the other zope packages
703            - ampache 3.4.1-2 (embed)
704            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
705            - hobix 0.5~svn20070319-4 (embed; bug #555247)
706            - zabbix 1.6.6-4 (embed; bug #555250)
707            - chora2 <unfixed> (embed; bug #555253)
708            - gollem <unfixed> (embed; bug # 555254)
709            - jscropperui 1.2.1-1 (embed; bug #555257)
710            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
711            - ingo1 <unfixed> (embed; bug #555261)
712            - kronolith2 <unfixed> (embed; bug #555262)
713            - activeldap <unfixed> (embed)
714            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
715            - mantis <unfixed> (embed; bug #555265)
716            - otrs2 2.3.4-6 (embed; bug #555267)
717            - webcalendar <unfixed> (embed; bug #555269)
718            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
719            - jifty 0.90519-1 (embed; bug #555271)
720            - jquery <unfixed> (embed; bug #555272)
721            - passenger 2.2.5debian1-1 (embed; bug #555273)
722            - plone3 <unfixed> (embed; bug #555275)
723            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
724            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
725            - xulrunner <unfixed> (embed)
726            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
727    
728    gdb
729            - insight <unfixed> (embed)
730    
731    e2fsprogs
732            - ldiskfsprogs <unfixable> (fork)
733    
734    quazip (not packaged in Debian)
735            - qcake <unfixed> (embed)
736            NOTE: starting with upstream version 0.6.4
737    
738    exo
739            - pcmanfm <unfixed> (embed; bug #499677)
740            NOTE: slightly modified source code
741    
742    java
743            - openjdk-6 <unfixed>
744            - sun-java5 <unfixed>
745            - sun-java6 <unfixed>
746    
747    libphp-snoopy
748            - ampache 3.4.1-2 (embed; bug #504169)
749            - gforge 4.6.99+svn6094-2 (embed)
750            - mahara 1.0.5-2 (embed; bug #504170)
751            - pixelpost 1.7.1-5 (embed; bug #504171)
752            - mediamate 0.9.3.6-5 (embed; bug #504172)
753            - opendb <removed> (embed; bug #504173)
754            [etch] - opendb <unfixed> (embed; bug #504173)
755            - wordpress 2.5.1-9 (embed; bug #443948)
756            - moodle <unfixed> (embed; bug #507185)
757            [etch] - phpgroupware <unfixed> (embed)
758            NOTE: phpgroupware-felamimail
759            - magpierss 0.72-3 (embed; bug #431089)
760    
761    jquery
762            - zekr <unfixed> (embed)
763            - wordpress <unknown> (embed)
764            - yocto-reader <unfixed> (embed)
765            - textpattern <unfixed> (embed)
766            - genshi 0.5.1-1 (embed)
767            NOTE: compressed file under examples/ dir
768            - prewikka <unfixed> (embed)
769            - libramaze-ruby <unfixed> (embed)
770            - drupal5 <unfixed> (embed)
771            - b2evolution <unfixed> (embed)
772            - wesnoth <unfixed> (embed)
773    
774    tablesorter (jquery plugin, not packaged yet)
775            - wesnoth <unfixed> (embed)
776    
777    kses
778            - wordpress <unfixed> (embed; bug #504242)
779            NOTE: their copy has all methods renamed to wp_<foo>
780            NOTE: kses isn't in Debian, RFP: #504240
781            - moodle <unfixed> (embed; bug #507185)
782            - egroupware <unfixed> (embed)
783    
784    magpierss
785            - wordpress <unfixed> (embed; bug #504242)
786            - moodle <unfixed>
787    
788    php-gettext
789            - wordpress 2.8.4-1 (embed; bug #504242)
790    
791    libphp-ixr (name may change, it is the Incutio XML-RPC)
792            - wordpress <unfixed> (embed; bug #504242)
793            NOTE: libphp-ixr isn't in Debian, RFP: #504236
794            - dokuwiki <unfixed> (embed)
795            - textpattern <unfixed> (embed)
796    
797    libphp-cas
798            - glpi <unfixed> (embed)
799            - moodle <unfixed> (embed; bug #505984)
800    
801    scriptaculous (prototype.js is among the embeds in the following)
802            - glpi <unfixed> (embed)
803            - libaws <unfixed> (embed; bug #555222)
804            - op-panel <unfixed> (embed)
805            - symfony <unfixed> (embed)
806            NOTE: maintainer says there are extra incompatible changes required
807            - pixelpost 1.7.1-6 (embed)
808            - webhelpers <unfixed> (embed)
809            - qwik <unfixed> (embed; bug #555241)
810            - smokeping <unfixed> (embed)
811            - turba2 <unfixed> (embed)
812            - typo3-src 4.2.3-1 (embed)
813            - request-tracker3.6 <unfixed> (embed)
814            - request-tracker3.8 <unfixed> (embed)
815            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
816            - wordpress 2.5.0-2 (embed)
817            - libhtml-prototype-perl 1.48-3 (embed)
818    
819    libmarkdown-php
820            - moodle <unfixed> (embed; bug #507185)
821            - pixelpost 1.7.1-6 (embed)
822    
823    php-openid
824            - wordpress-openid <itp> (embed)
825    
826    geshi
827            - dokuwiki 0.0.20080505-3.1 (embed)
828            - pgfouine 1.0-1.1 (embed)
829            - websvn 2.1.0-1 (embed)
830    
831    webcalendar
832            - gforge 4.7~rc2-6 (embed; bug #504758)
833    
834    libical
835            - kdepim <unfixed> (fork)
836            - kdepimlibs <unfixed> (fork)
837            NOTE: fixed in KDE4 post 4.1.x series
838            - claws-mail-extra-plugins <unfixed> (fork)
839    
840    libltdl3
841            - kdelibs <unfixed> (embed)
842            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
843            - synfig <unfixed> (embed)
844    
845    harfbuzz
846            - qt4-x11 <unfixed> (embed)
847    
848    libzip
849            - php5 <unfixed> (fork)
850            - odt2txt <unfixed> (embed; bug #523808)
851    
852    json.php (not packaged; should be replaced with php's built-in functions)
853            - moodle <unfixed>
854            - yui <unfixed>
855            - gallery2 <unfixed>
856            - dokuwiki <unfixed>
857            - typo3-src <unfixed>
858    
859    php-fpdf
860            - tcpdf <itp> (fork)
861            - moodle <unfixed>
862            - phpwiki <unfixed>
863            - egroupware <unfixed>
864            - ldap-account-manager <unfixed> (fork)
865    
866    tcpdf (itp: #495985)
867            - moodle <unfixed>
868            - phpmyadmin <unfixed>
869    
870    typo3
871            - moodle <unfixed>
872    
873    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
874            - moodle <unfixed>
875            - gosa <unfixed>
876    
877    php-ole (itp: #487558)
878            - moodle <unfixed>
879    
880    pieforms (http://www.catalyst.net.nz)
881            - mahara <unfixed>
882    
883    savant2 (http://phpsavant.com)
884            - egroupware <unfixed>
885    
886    rssparser (http://nwow.org)
887            - egroupware <unfixed>
888            - phpgroupware <unfixed>
889    
890    lcms
891            - openjdk-6 <unfixed> (fork)
892    
893    libphp-phplayersmenu
894            - diogenes <unfixed>
895            - phpldapadmin <unfixed>
896    
897    libphp-pclzip
898            - docvert <unfixed>
899            - moodle <unfixed>
900            - egroupware <unfixed>
901    
902    libphp-simplepie
903            - dokuwiki <unfixed>
904    
905    libphp-jpgraph
906            - egroupware <unfixed>
907    
908    php-simpletest
909            - moodle <unfixed>
910    
911    libpng
912            - iceweasel <not-affected> (uses xulrunner)
913            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
914            - iceape 1.0.13~pre080614i-0etch1 (embed)
915            - xulrunner 1.9.0.13-1 (embed)
916            [lenny] - xulrunner 1.9.0.11-0lenny1
917            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
918            - gamera 3.2.3-1 (embed)
919    
920    irssi
921            - silc-client <unfixed> (embed)
922            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
923    
924    extc
925            - mtasc <unfixed> (embed)
926            - haxe <unfixed> (embed)
927    
928    swflib
929            - mtasc <unfixed> (embed)
930            - haxe <unfixed> (embed)
931    
932    libitext-java
933            - bouncycastle 2.1.4-1 (embed)
934    
935    python-ply
936            - pyke <unfixed> (embed; bug #555363)
937            - pywbem <unfixed> (embed; bug #555364)
938            - sepolgen <unfixed> (embed; bug #555365)
939            - zope-textindexng3 <unknown> (embed)
940            - iceweasel <not-affected> (uses xulrunner)
941            - xulrunner <unknown> (embed)
942            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
943    
944    libdumbnet (libdnet upstream)
945            - nmap <unfixed> (fork)
946    
947    gcc-4.4
948            - gcc-mingw32 <unfixed> (embed)
949    
950    camlimages
951            - advi <unfixed> (static; bug #550441)
952    
953    memcached
954            - memcachedb <unfixed> (embed)
955    
956    yajl
957            - argyll <unfixed> (embed; bug #544223)
958            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
959    
960    nusoap
961            - gforge 4.8.2-1 (embed)
962    
963    libept
964            - adept <unfixed> (embed; bug #540649)
965    
966    libvorbis
967            - iceweasel <not-affected> (uses xulrunner)
968            - xulrunner <unfixed> (embed; bug #540959)
969            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
970            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
971            - iceape <unfixed> (embed)
972            [etch] - iceape <not-affected> (introduced in 2.0)
973            [lenny] - iceape <not-affected> (introduced in 2.0)
974    
975    cairo
976            - iceweasel <not-affected> (uses xulrunner)
977            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
978    
979    liboggz
980            - iceweasel <not-affected> (uses xulrunner)
981            - xulrunner <unfixed> (embed; bug #540959)
982            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
983            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
984            - iceape <unfixed> (embed)
985            [etch] - iceape <not-affected> (introduced in 2.0)
986            [lenny] - iceape <not-affected> (introduced in 2.0)
987    
988    liboggplay
989            - iceweasel <not-affected> (uses xulrunner)
990            - xulrunner <unfixed> (embed; bug #540959)
991            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
992            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
993            - iceape <unfixed> (embed)
994            [etch] - iceape <not-affected> (introduced in 2.0)
995            [lenny] - iceape <not-affected> (introduced in 2.0)
996    
997    php-net-dnsbl
998            - serendipity <unfixed> (embed)
999    
1000    php-onyx-rss
1001            - serendipity <unfixed> (embed)
1002    
1003    php-text-wiki
1004            - serendipity <unfixed> (embed)
1005    
1006    php-xml-rpc
1007            - serendipity <unfixed> (embed)
1008    
1009    polarssl (does not have a shared library)
1010            - pdkim <itp> (embed; bug #543150)
1011            - xyssl <unfixed> (old-version)
1012    
1013    pidgin
1014            - gaim <removed> (old-version)
1015    
1016    icu
1017            - webkit 1.0.1-1 (embed; bug #547214)
1018            - texlive-bin <unfixed> (fork)
1019            NOTE: texlive upstream working with icu upstream to merge their changes
1020    
1021    cyrus-imapd-2.2
1022            - kolab-cyrus-imapd <unfixed> (fork)
1023            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1024    
1025    python-cxx-dev
1026            - freecad <unfixed> (embed; bug #547936)
1027    
1028    libzipios++-dev
1029            - freecad <unfixed> (embed; bug #547941)
1030    
1031    linux-2.6
1032            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
1033            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1034            - kernel-source-2.6.8 <removed> (old-version)
1035            - kernel-source-2.4.27 <removed> (old-version)
1036            - kernel-source-2.4.24 <removed> (old-version)
1037            - kernel-source-2.2.25 <removed> (old-version)
1038            - kernel-source-2.2.20 <removed> (old-version)
1039    
1040    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1041            - kvm <unfixed> (embed) [./libfdt/*]
1042    
1043    qweb (not packaged)
1044            - ajaxterm <unfixed>
1045    
1046    opensaml2
1047            - opensaml <removed> (old-version)
1048    
1049    shibboleth-sp2
1050            - shibboleth-sp <removed> (old-version)
1051    
1052    tuxonice-userui
1053            - suspend2-userui <removed> (old-version)
1054    
1055    expat
1056            - w3c-libwww <removed> (embed; bug #551941)
1057            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1058            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1059            - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1060            - python2.4 <unfixed> (embed; bug #553403)
1061            - wxwindows2.4 <removed> (embed)
1062            - wxwidgets2.6 <unfixed> (embed)
1063            - wxwidgets2.8 <unfixed> (embed)
1064            - celementtree <unfixed> (embed)
1065            - audacity <unfixed> (embed)
1066            - matanza <unfixed> (embed)
1067            - tdom <unfixed> (embed)
1068            - udunits <unfixed> (embed)
1069            - apr-util 1.2 (embed)
1070            - ayttm <unfixed> (embed)
1071            - cableswig <unfixed> (embed)
1072            - cadaver <unfixed> (embed)
1073            - cmake <unfixed> (embed)
1074            - coin3 <unfixed> (embed)
1075            - gdcm <unfixed> (embed)
1076            - ghostscript <unfixed> (embed)
1077            - grmonitor <unfixed> (embed)
1078            - iceape <unfixed> (embed)
1079            - insighttoolkit <unfixed> (embed)
1080            - libparagui1.1 <unfixed> (embed)
1081            - paraview <unfixed> (embed)
1082            - poco <unfixed> (embed)
1083            - simgear <unfixed> (embed)
1084            - sitecopy <unfixed> (embed)
1085            - smart 1.0-1 (embed)
1086            [etch] - smart <unfixed> (embed)
1087            - swish-e <unfixed> (embed)
1088            - tla <unfixed> (embed)
1089            - vtk <unfixed> (embed)
1090            - wbxml2 <unfixed> (embed)
1091            - xmlrpc-c <unfixed> (embed)
1092            - iceweasel <unfixed> (embed)
1093            - kompozer <unfixed> (embed)
1094            - vxl <unfixed> (embed)
1095            - xulrunner <unfixed> (embed)
1096            - apache2 2.2 (embed)
1097            - texlive-bin <unfixed> (embed) [included twice]
1098            - vnc4 <unfixed> (embed)
1099            - xotcl <unfixed> (embed)
1100    
1101    xerces-c
1102            - xerces-c2 <unfixed> (old-version)
1103            - xerces27 <removed> (old-version)
1104    
1105    md5 (RSA's version; not the gnu version provided by coreutils)
1106            - w3c-libwww <removed> (embed; bug #551942)
1107            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1108    
1109    enet
1110            - sauerbraten <unfixed> (embed; #497194)
1111    
1112    eglibc
1113            - glibc <removed> (old-version)
1114    
1115    galib
1116            - gamera 3.2.3-1 (embed)
1117    
1118    configobj
1119            - bzr <unfixed> (embed; bug #555336)
1120            - elisa <unfixed> (embed; bug #555337)
1121            - gaupol <unfixed> (embed; bug #555338)
1122            - ipython <unfixed> (embed; bug #555339)
1123            - pida <unfixed> (embed; bug #555340)
1124            - psychopy <unfixed> (embed; bug #555341)
1125            - rest2web <unfixed> (embed; bug #555342)
1126            - auth2db <unknown> (embed)
1127            - dynagen <unknown> (embed)
1128            - iceweasel <unknown> (embed)
1129            - sabnzbdplus <unknown> (embed)
1130            - xulrunner <unknown> (embed)
1131            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1132    
1133    python-clientform
1134            - bibus <unfixed> (embed; bug #555332)
1135            - zope2.10 <unfixed> (embed; bug #555333)
1136            - zope2.11 <unfixed> (embed; bug #555334)
1137            - python-mechanize <unknown> (embed)
1138            - twill <unknown> (embed)
1139    
1140    python-mechanize
1141            - zope2.10 <unfixed> (embed; bug #555337)
1142            - zope2.11 <unfixed> (embed; bug #555338)
1143            - twill <unknown> (embed; bug #555339)
1144    
1145    pexpect
1146            - duplicity 0.6.06-1 (embed; bug #555361)
1147            - hplip <unfixed> (embed; bug #555362)
1148            - smart <unfixed> (embed; bug #555363)
1149    
1150    pyparsing
1151            - bauble <unfixed> (embed; bug #555366)
1152            - boa-constructor 0.6.1-8 (embed; bug #555367)
1153            - calibre <unfixed> (embed; bug #555368)
1154            - matplotlib <unfixed> (embed; bug #531024)
1155            - zhpy <unfixed> (embed; bug #555370)
1156            - polybori <unknown> (embed)
1157            - python-whoosh <unknown> (embed)
1158            - twill <unknown> (embed)
1159            - zope-textindexng3 <unknown> (embed)
1160    
1161    python-pysqlite2
1162            - python2.4 <unfixed> (embed; bug #553403)
1163            - python2.5 <unfixed> (embed; bug #553403)
1164    
1165    celementtree
1166            - python2.5 <unfixed> (embed)
1167            - smart 1.0-1 (embed)
1168            [etch] - smart <unfixed> (embed)
1169    
1170    elementtree
1171            - python2.5 <unfixed> (embed)
1172            - bzr <unfixed> (embed; bug #555343)
1173            - gedit 2.28.2-1 (embed; bug #555344)
1174            - smart 1.0-1 (embed)
1175            [etch] - smart <unfixed> (embed)
1176            - solfege <unfixed> (embed; bug #555345)
1177            - w3af <unfixed> (embed; bug #555346)
1178            - python-qt4 <unknown> (embed)
1179            - sphinx <unknown> (embed)
1180            - python-nltk <itp> (embed)
1181    
1182    python2.5
1183            - python2.4 <unfixed> (old-version)
1184            - jython <unfixed> (embed)
1185            NOTE: embeds many stdlib modules
1186            - python-django <unfixed> (embed; bug #555419)
1187            NOTE: embeds stdlib modules: doctest, decimal
1188            - gamera 3.2.3-1 (embed)
1189            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1190            - boa-constructor <unfixed> (embed; bug #555426)
1191            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1192            - nicotine <unfixed> (embed; bug #555427)
1193            NOTE: embeds stdlib modules: ConfigParser
1194            - museek+ <unfixed> (embed; bug #555428)
1195            NOTE: embeds stdlib modules: ConfigParser
1196            - vegastrike-data <unfixed> (embed)
1197            NOTE: embeds many stdlib modules
1198            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1199            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1200            - config-manager <unfixed> (embed; bug #555423)
1201            NOTE: embeds stdlib modules: optparse
1202            - jhbuild 2.28.0-1 (embed; bug #555421)
1203            NOTE: embeds stdlib modules: optparse, subprocess
1204            - smart <unfixed> (embed; bug #555432)
1205            NOTE: embeds stdlib modules: optparse
1206            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1207            NOTE: embeds stdlib modules: doctest
1208            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1209            NOTE: embeds stdlib modules: doctest
1210            - distribute <unfixed> (embed)
1211            NOTE: embeds stdlib modules: doctest
1212            - python-setuptools <unfixed> (embed; bug #555435)
1213            NOTE: embeds stdlib modules: doctest
1214            - zope.testing <unfixed> (embed; bug #555436)
1215            NOTE: embeds stdlib modules: doctest
1216            - translate-toolkit <unfixed> (embed; bug #555422)
1217            NOTE: embeds stdlib modules: textwrap, contextlib
1218            - libtpclient-py <unfixed> (embed; bug #555424)
1219            NOTE: embeds stdlib modules: subprocess
1220            - grass <unfixed> (embed; bug #555425)
1221            NOTE: embeds stdlib modules: subprocess
1222            - coherence <unfixed> (embed; bug #555429)
1223            NOTE: embeds stdlib modules: uuid
1224            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1225            NOTE: embeds stdlib modules: uuid
1226            - setroubleshoot <unfixed> (embed; bug #555431)
1227            NOTE: embeds stdlib modules: uuid
1228            - linkchecker <unfixed> (embed; bug #555414)
1229            NOTE: embeds msgfmt.py script
1230            - imdbpy <unfixed> (embed)
1231            NOTE: embeds msgfmt.py script
1232            - kiwi <unfixed> (embed)
1233            NOTE: embeds msgfmt.py script
1234            - moin <unfixed> (embed)
1235            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1236            - plone3 <unfixed> (embed)
1237            NOTE: embeds msgfmt.py script
1238            - roundup <unfixed> (embed)
1239            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1240            - rednotebook <unfixed> (embed; bug #555415)
1241            NOTE: embeds msgfmt.py script
1242            - turbogears <unfixed> (embed)
1243            NOTE: embeds msgfmt.py script
1244            - elisa <unfixed> (embed)
1245            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1246            - calibre <unfixed> (embed)
1247            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1248            - mailman <unfixed> (embed; #555416)
1249            NOTE: embeds msgfmt.py script
1250            - python-docutils <unknown> (embed)
1251            NOTE: embeds stdlib modules: optparse, textwrap
1252            - python-imaging <unknown> (embed)
1253            NOTE: embeds stdlib modules: doctest
1254            - python-mechanize <unknown> (embed)
1255            NOTE: embeds stdlib modules: doctest
1256            - twill <unknown> (embed)
1257            NOTE: embeds stdlib modules: subprocess
1258            - zeroc-ice <unknown> (embed)
1259            NOTE: embeds stdlib modules: subprocess
1260            - wxwidgets2.8 <unknown> (embed)
1261            NOTE: embeds stdlib modules: subprocess
1262            - cycle <unknown> (embed)
1263            NOTE: embeds msgfmt.py script
1264            - deluge <unknown> (embed)
1265            NOTE: embeds msgfmt.py script
1266            - opendict <unknown> (embed)
1267            NOTE: embeds msgfmt.py script
1268            - openerp-client <unknown> (embed)
1269            NOTE: embeds msgfmt.py script
1270            - rapidsvn <unknown> (embed)
1271            NOTE: embeds msgfmt.py script
1272            - wammu <unknown> (embed)
1273            NOTE: embeds msgfmt.py script
1274            - gaphor <unknown> (embed)
1275            NOTE: embeds msgfmt.py script
1276            - pida <unknown> (embed)
1277            NOTE: embeds msgfmt.py script
1278            - python-formencode <unknown> (embed)
1279            NOTE: embeds msgfmt.py script
1280            - duplicity <unfixed> (embed)
1281            NOTE: embeds stdlib module: urlparse, tarfile
1282            - pygopherd <unfixed> (embed)
1283            NOTE: embeds stdlib module: zipfile
1284    
1285    argparse
1286            - twill <unfixed> (embed; bug #555347)
1287            - ipython <unfixed> (embed; bug #555348)
1288    
1289    coherence
1290            - elisa <unfixed> (embed; bug #555335)
1291    
1292    simpletal
1293            - plastex <unfixed> (embed; bug #555371)
1294    
1295    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1296            - postr <unfixed> (embed)
1297            - elisa <unfixed> (embed)
1298    
1299    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1300            - apertium-tolk <unfixed> (embed)
1301            - ipython <unfixed> (embed)
1302            - virtaal <unfixed> (embed)
1303    
1304    distribute
1305            - setuptools <removed> (old-version)
1306    
1307    rails
1308            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1309            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1310            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1311            - thin <unfixed> (embed) [./spec/rails_app/*]
1312            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1313            NOTE: be dangerous if developers are naively basing their code off of the examples
1314            NOTE: prototype.js is among the example files
1315    
1316    lucene2 (prototype.js is among the embeds in the following)
1317            - lucene <unfixed> (old-version)
1318            - pylucene <unfixed> (embed)
1319            - libpdfbox-java <unfixed> (embed)
1320            - libfontbox-java <unfixed> (embed)
1321            - libjempbox-java <unfixed> (embed)
1322            - solr <unfixed> (embed)
1323    
1324    unicode-data
1325            - syslinux <unfixed> (embed)
1326            - camomile <unfixed> (embed)
1327            - fribidi <unfixed> (embed)
1328            - m17n-db <unfixed> (embed)
1329            - sbcl <unfixed> (embed)
1330            - heimdal <unfixed> (embed)
1331            - icu <unfixed> (embed)
1332            - icu4j <unfixed> (embed)
1333            - krb5 <unfixed> (embed)
1334            - moodle <unfixed> (embed)
1335            - openldap <unfixed> (embed)
1336            - pike7.6 <unfixed> (embed)
1337            - samba <unfixed> (embed)
1338            - samba4 <unfixed> (embed)
1339            - cmucl <unfixed> (embed)
1340            - typo3-src <unfixed> (embed)
1341            - mauve <unfixed> (embed)
1342            - texlive-bin <unfixed> (embed)
1343            - ypsilon <unfixed> (embed)
1344            - jeuclid <unfixed> (embed)
1345            - charmap.app <unfixed> (embed)
1346            - clisp <unfixed> (embed)
1347            - gnulib <unfixed> (embed)
1348            - opensrs-client <unfixed> (embed)
1349            - saxonb <unfixed> (embed)
1350            - rails <unfixed> (embed)
1351    
1352    feedparser
1353            - rawdog <unfixed> (embed; bug #383422)
1354            - miro <unfixed> (embed; bug #555351)
1355            - calibre <unfixed> (embed; bug #555352)
1356            - freevo <unfixed> (embed; bug #555353)
1357            - pida <unfixed> (embed; bug #555354)
1358            - planet-venus <unfixed> (embed; bug #555355)
1359            - plone3 <unfixed> (embed; bug #555356)
1360            - exaile 0.2.14+debian-1 (embed)
1361            - screenlets 0.1.2-3 (embed)
1362            NOTE: included twice
1363    
1364    agg:
1365            - matplotlib <unfixed> (embed: bug #377271)
1366            - contextfree <unfixed> (embed)
1367            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1368            - exactimage <unfixed> (embed)
1369            - python-enable <unfixed> (embed)
1370            - mapnik 0.5.1-3 (embed)
1371            NOTE: links statically to agg, but shared library is not available (bug #377271)
1372    
1373    vtk
1374            - paraview <unfixable> (embed; bug #495426)
1375    
1376    txt2tags
1377            - rednotebook <unfixed> (embed)
1378    
1379    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1380            - gajim <unfixed> (embed)
1381            - emesene <unfixed> (embed)
1382            - convirt <unfixed> (embed)
1383            - pida <unfixed> (embed)
1384            - rednotebook <unfixed> (embed)
1385    
1386    horde3 (prototype.js is among the embeds in the following)
1387            - mnemo2 <unfixed> (embed)
1388            - nag2 <unfixed> (embed)
1389    
1390    cimg
1391            - gmic <itp> (embed)
1392    
1393    mootools
1394            - gmic <itp> (embed)
1395    
1396    openldap
1397            - openldap2.3 <removed> (old-version)
1398    
1399    grub2
1400            - grub <unfixed> (old-version)
1401    
1402    gnupginterface
1403            - duplicity <unfixed> (embed)
1404    
1405    python-dateutil
1406            - awn-extras-applets <unfixed> (embed)
1407            - matplotlib <unknown> (embed)
1408    
1409    cups
1410            - cupsys <removed> (old-version)
1411    
1412    yui
1413            - bcfg2 <not-affected> (present in source but not included in any binary files)
1414            - serendipity <unfixed> (embed; bug #557746)
1415            - moodle 1.8.2.dfsg-5 (embed)
1416            - jifty <unfixed> (embed; bug #557748)
1417            - webgui 7.7.26-1 (embed)
1418            - loggerhead 1.17-1 (embed)
1419    
1420    quake3 (vanilla source not packaged in debian)
1421            - openarena <unfixable> (fork)
1422    
1423    quake2 (vanilla source not packaged in debian)
1424            - alien-arena <unfixable> (fork)
1425            - warsow <unfixable> (fork)
1426    
1427    libtheora
1428            - iceweasel <not-affected> (uses xulrunner)
1429            - xulrunner <unfixed> (embed; bug #540959)
1430            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1431            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1432            - iceape <unfixed> (embed; bug #559276)
1433            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1434            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1435    
1436    dtoa
1437            - bfilter <unfixed> (embed)
1438            - cacao <unfixed> (embed)
1439            - cdrdao <unfixed> (embed)
1440            - classpath <unfixed> (embed)
1441            - freej <unfixed> (embed)
1442            - iceape <unfixed> (embed)
1443            - iceweasel <unfixed> (embed)
1444            - jscoverage <unfixed> (embed)
1445            - kde4libs <unfixed> (embed)
1446            - kdelibs <unfixed> (embed)
1447            - kompozer <unfixed> (embed)
1448            - libv8 <unfixed> (embed)
1449            - mono <unfixed> (embed)
1450            - newlib <unfixed> (embed)
1451            - nspr <unfixed> (embed)
1452            - php5 <unfixed> (embed)
1453            - polyml <unfixed> (embed)
1454            - qt4-x11 <unfixed> (embed)
1455            - rhino <unfixed> (embed)
1456            NOTE: code translated to Java
1457            - ruby1.8 <unfixed> (embed)
1458            - ruby1.9 <unfixed> (embed)
1459            - ruby1.9.1 <unfixed> (embed)
1460            - sdd <unfixed> (embed)
1461            - sfind <unfixed> (embed)
1462            - star <unfixed> (embed)
1463            - tinymux <unfixed> (embed)
1464            - virtualbox-ose <unfixed> (embed)
1465            - webkit <unfixed> (embed)
1466            - xulrunner <unfixed> (embed)
1467    
1468    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1469            - firegpg <unfixed> (embed)
1470            - enigmail <unfixed> (embed)

Legend:
Removed from v.8523  
changed lines
  Added in v.13447

  ViewVC Help
Powered by ViewVC 1.1.5