/[secure-testing]/data/embedded-code-copies

Diff of /data/embedded-code-copies

Parent Directory | Revision Log | View Patch Patch

-revision 13267 by jwilk-guest,
Tue Nov 10 14:04:47 2009 UTC
+revision 13474 by gilbert-guest,
Mon Dec  7 03:10:28 2009 UTC
 Line 56 
 libevent
  lrmi
          - read-edid 2.0.0-1 (embed; bug #495131)
+         - s3switch <unfixed> (embed)
+         - xresprobe <unfixed> (embed)
+         - zhcon <unfixed> (embed)
  peercast
          - gnome-peercast <removed> (embed)
-Line 82 
 spandsp
+Line 85 
 spandsp
          - iaxmodem <unfixable> (embed; bug #548885)
  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
-         - dpkg <unfixed> (embed)
+         - dpkg <unfixed> (static)
          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
          - rsync <unfixed> (embed)
          NOTE: somehow derived code base
-Line 138 
 libbz2
+Line 141 
 libbz2
          - dpkg <unfixed> (static)
  libgadu
-         - centericq <unfixed> (embed)
+         - centerim <unfixed> (embed; bug #559783)
          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
          - kdenetwork 4:3.3.2-5 (embed)
-Line 164 
 iceape
+Line 167 
 iceape
          - icedove <unfixed> (fork)
          - xulrunner <unfixed> (fork)
          - kompozer <unfixed> (embed; bug #532168)
+         - galeon <unfixed> (fork)
+         - epiphany-browser <unfixed> (fork)
+         - conkeror <unfixed> (fork)
+         - kazehakase <unfixed> (fork)
  xli
          - xloadimage <unfixed> (embed)
-Line 193 
 libbsd
+Line 200 
 libbsd
          - atheme-services <unfixed>
          - libbsd-arc4random-perl <unfixed>
          - isakmpd <unfixed>
+         - bsdgames <unfixed> (embed)
+         - bsd-mailx <unfixed> (embed)
+         - netcat-openbsd <unfixed> (embed; bug #550611)
+         - openssh <unfixed> (embed)
+         - unworkable <unfixed> (embed)
  cvs
          - gcvs <unfixed> (embed)
-Line 232 
 sqlite (not affected by security vulnera
+Line 244 
 sqlite (not affected by security vulnera
          - amarok <unfixed> (embed)
          - monotone 0.43-1 (embed)
          - iceweasel <unfixed> (embed)
+         - heimdal <unfixed> (embed; bug #559616)
  util-linux/mount
          - loop-aes-utils <unfixed> (embed)
-Line 262 
 ffmpeg (libavcodec/libavformat)
+Line 275 
 ffmpeg (libavcodec/libavformat)
          - xmovie <removed> (static)
          TODO: gimp-gap (potentially using ffmpeg code as well)
          - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
+         - audacity 1.3.7-2 (embed; bug #512278)
  faad2
          - mplayer 1.0~rc2-20 (embed)
          - avifile <unfixed> (embed; bug #538750)
+         - ffmpeg-debian <removed> (old-version)
  libmad (MPEG decoding lib)
          - xine-lib <unfixed> (embed)
-Line 422 
 libvncserver
+Line 437 
 libvncserver
  putty
          - filezilla <unfixed> (embed)
- tinyxml (not packaged in Debian)
+ tinyxml (not packaged in Debian; itp bug #531968)
          - filezilla <unfixed>
+         - crystalspace <unfixed> (embed)
+         - libwfut <unfixed> (embed)
+         - rarian <unfixed> (embed)
+         - bulletml <unfixed> (embed)
+         - pokerth <unfixed> (embed)
+         - qutecom <unfixed> (embed)
+         - sofa-framework <unfixed> (embed)
+         - yate <unfixed> (embed)
+         - antigrav <unfixed> (embed)
+         - balder2d <unfixed> (embed)
+         - cal3d <unfixed> (embed)
+         - criticalmass <unfixed> (embed)
+         - ember <unfixed> (embed)
+         - epiphany <unfixed> (embed)
+         - gambit <unfixed> (embed)
+         - noiz2sa <unfixed> (embed)
+         - ogre <unfixed> (embed)
+         - opencity <unfixed> (embed)
+         - openmovieeditor <unfixed> (embed)
+         - pouetchess <unfixed> (embed)
+         - tecnoballz <unfixed> (embed)
+         - trigger-rally <unfixed> (embed)
+         - xmoto <unfixed> (embed)
+         - mapnik <unknown> (embed)
+         NOTE: uses a different XML parser by default
+         - rrootage 0.23a-6 <embed>
+         NOTE: links to libbulltetml
+         - boson <unknown> (embed)
+         NOTE: the embedded code is unused
  gv
          - evince <unfixed> (embed)
-Line 477 
 librpcsecgss
+Line 521 
 librpcsecgss
          - krb5 <unfixed> (embed)
  jasper
-         - ghostscript <unfixed> (embed)
+         - ghostscript 8.70~dfsg-2+b1 (embed)
-         - gs-gpl <unfixed> (embed)
+         - ghostscript <unfixed> (static)
  libiris
          - psi <unfixed> (embed)
-Line 498 
 liblua
+Line 542 
 liblua
          - monotone 0.43-1 (embed)
          - nmap 5.00-1 (embed; bug #527997)
          [lenny] - nmap <unfixed> (embed; bug #527997)
+         - ocropus <unfixed> (embed)
  libbotan
          - monotone 0.43-1 (embed)
-Line 533 
 guichan
+Line 578 
 guichan
  tolua
          - boswars <unfixed> (embed)
          NOTE: maintainer notified us, working on it
+         - ocropus <unfixed> (embed)
+         - freeciv <unfixed> (embed)
  asio-dev
          - luxrender <removed> (embed)
-Line 568 
 fribidi
+Line 615 
 fribidi
  glew
          - quesoglc <unfixed> (embed; bug #489341)
          NOTE: waiting on GLEW_MX version of glew (see bug #474488)
+         - trigger <unfixed> (embed)
+         NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
+         - trigger-rally <unfixed> (embed)
+         NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
          - transcend <unfixed> (embed)
-Line 584 
 cpio
+Line 635 
 cpio
          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
  webkit
-         - qt4-x11 <unfixed> (embed)
+         - qt4-x11 <unfixed> (embed; bug #479851)
+         - kdelibs <unfixed> (old-version)
+         - kde4libs <unfixed> (fork)
  ftgl
          - blender 2.46+dfsg-1 (embed)
-Line 647 
 prototypejs
+Line 700 
 prototypejs
          - webcit <unfixed> (embed; bug #555219)
          - asterisk 1:1.6.2.0~rc3-1 (embed)
          - libjson-ruby 1.1.4-1 (embed; bug #555224)
-         - lucene2 <unfixed> (embed; bug #555226)
+         - lucene2 2.9.1+ds1-2 (embed; bug #555226)
          - horde3 <unfixed> (embed)
          - knowledgeroot <unfixed> (embed; bug #555230)
          - mediatomb <unfixed> (embed; bug #555233)
-Line 660 
 prototypejs
+Line 713 
 prototypejs
          - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
          TODO: search through all of the other zope packages
          - ampache 3.4.1-2 (embed)
-         - exaile <unfixed> (embed; bug #555245)
+         - exaile 0.2.14+debian-2.1 (embed; bug #555245)
-         - hobix <unfixed> (embed; bug #555247)
+         - hobix 0.5~svn20070319-4 (embed; bug #555247)
          - zabbix 1.6.6-4 (embed; bug #555250)
          - chora2 <unfixed> (embed; bug #555253)
          - gollem <unfixed> (embed; bug # 555254)
-Line 672 
 prototypejs
+Line 725 
 prototypejs
          - activeldap <unfixed> (embed)
          - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
          - mantis <unfixed> (embed; bug #555265)
-         - otrs2 <unfixed> (embed; bug #555267)
+         - otrs2 2.3.4-6 (embed; bug #555267)
          - webcalendar <unfixed> (embed; bug #555269)
          - redmine 0.9.0~svn2907-1 (embed; bug #555270)
-         - jifty <unfixed> (embed; bug #555271)
+         - jifty 0.90519-1 (embed; bug #555271)
          - jquery <unfixed> (embed; bug #555272)
          - passenger 2.2.5debian1-1 (embed; bug #555273)
          - plone3 <unfixed> (embed; bug #555275)
          - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
+         - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
          - xulrunner <unfixed> (embed)
          NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
-Line 704 
 java
+Line 758 
 java
  libphp-snoopy
          - ampache 3.4.1-2 (embed; bug #504169)
+         - gforge 4.6.99+svn6094-2 (embed)
          - mahara 1.0.5-2 (embed; bug #504170)
          - pixelpost 1.7.1-5 (embed; bug #504171)
          - mediamate 0.9.3.6-5 (embed; bug #504172)
-Line 761 
 scriptaculous (prototype.js is among the
+Line 816 
 scriptaculous (prototype.js is among the
          - op-panel <unfixed> (embed)
          - symfony <unfixed> (embed)
          NOTE: maintainer says there are extra incompatible changes required
-         - pixelpost <unfixed> (embed)
+         - pixelpost 1.7.1-6 (embed)
          - webhelpers <unfixed> (embed)
          - qwik <unfixed> (embed; bug #555241)
          - smokeping <unfixed> (embed)
-Line 769 
 scriptaculous (prototype.js is among the
+Line 824 
 scriptaculous (prototype.js is among the
          - typo3-src 4.2.3-1 (embed)
          - request-tracker3.6 <unfixed> (embed)
          - request-tracker3.8 <unfixed> (embed)
-         - rt-extension-emailcompletion <unfixed> (embed)
+         - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
          - wordpress 2.5.0-2 (embed)
+         - libhtml-prototype-perl 1.48-3 (embed)
  libmarkdown-php
          - moodle <unfixed> (embed; bug #507185)
-         - pixelpost <unfixed> (embed)
+         - pixelpost 1.7.1-6 (embed)
  php-openid
          - wordpress-openid <itp> (embed)
-Line 893 
 python-ply
+Line 949 
 python-ply
          - pywbem <unfixed> (embed; bug #555364)
          - sepolgen <unfixed> (embed; bug #555365)
          - zope-textindexng3 <unknown> (embed)
-         - iceweasel <unknown> (embed)
+         - iceweasel <not-affected> (uses xulrunner)
          - xulrunner <unknown> (embed)
          - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
-Line 913 
 yajl
+Line 969 
 yajl
          - argyll <unfixed> (embed; bug #544223)
          NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
+ nusoap
+         - gforge 4.8.2-1 (embed)
  libept
          - adept <unfixed> (embed; bug #540649)
-Line 921 
 libvorbis
+Line 980 
 libvorbis
          - xulrunner <unfixed> (embed; bug #540959)
          [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
          [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed)
+         [etch] - iceape <not-affected> (introduced in 2.0)
+         [lenny] - iceape <not-affected> (introduced in 2.0)
  cairo
          - iceweasel <not-affected> (uses xulrunner)
-Line 928 
 cairo
+Line 990 
 cairo
  liboggz
          - iceweasel <not-affected> (uses xulrunner)
-         - xulrunner <unfixed> (embed; bug #540949)
+         - xulrunner <unfixed> (embed; bug #540959)
          [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
          [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed)
+         [etch] - iceape <not-affected> (introduced in 2.0)
+         [lenny] - iceape <not-affected> (introduced in 2.0)
  liboggplay
          - iceweasel <not-affected> (uses xulrunner)
-         - xulrunner <unfixed> (embed; bug #540949)
+         - xulrunner <unfixed> (embed; bug #540959)
          [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
          [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed)
+         [etch] - iceape <not-affected> (introduced in 2.0)
+         [lenny] - iceape <not-affected> (introduced in 2.0)
  php-net-dnsbl
          - serendipity <unfixed> (embed)
-Line 957 
 polarssl (does not have a shared library
+Line 1024 
 polarssl (does not have a shared library
  pidgin
          - gaim <removed> (old-version)
+         - qutecom <unfixed> (embed; bug #559785)
  icu
          - webkit 1.0.1-1 (embed; bug #547214)
-Line 1007 
 expat
+Line 1075 
 expat
          - wxwidgets2.6 <unfixed> (embed)
          - wxwidgets2.8 <unfixed> (embed)
          - celementtree <unfixed> (embed)
-         - audacity <unfixed> (embed)
+         - audacity 1.3.2-1 (embed)
          - matanza <unfixed> (embed)
          - tdom <unfixed> (embed)
          - udunits <unfixed> (embed)
-Line 1088 
 python-mechanize
+Line 1156 
 python-mechanize
          - twill <unknown> (embed; bug #555339)
  pexpect
-         - duplicity <unfixed> (embed; bug #555361)
+         - duplicity 0.6.06-1 (embed; bug #555361)
          - hplip <unfixed> (embed; bug #555362)
          - smart <unfixed> (embed; bug #555363)
  pyparsing
          - bauble <unfixed> (embed; bug #555366)
-         - boa-constructor <unfixed> (embed; bug #555367)
+         - boa-constructor 0.6.1-8 (embed; bug #555367)
          - calibre <unfixed> (embed; bug #555368)
          - matplotlib <unfixed> (embed; bug #531024)
          - zhpy <unfixed> (embed; bug #555370)
-Line 1115 
 celementtree
+Line 1183 
 celementtree
  elementtree
          - python2.5 <unfixed> (embed)
          - bzr <unfixed> (embed; bug #555343)
-         - gedit <unfixed> (embed; bug #555344)
+         - gedit 2.28.2-1 (embed; bug #555344)
          - smart 1.0-1 (embed)
          [etch] - smart <unfixed> (embed)
          - solfege <unfixed> (embed; bug #555345)
-Line 1133 
 python2.5
+Line 1201 
 python2.5
          - gamera 3.2.3-1 (embed)
          NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
          - boa-constructor <unfixed> (embed; bug #555426)
-         NOTE: embeds stdlib modules: ConfigParser
+         NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
          - nicotine <unfixed> (embed; bug #555427)
          NOTE: embeds stdlib modules: ConfigParser
          - museek+ <unfixed> (embed; bug #555428)
          NOTE: embeds stdlib modules: ConfigParser
          - vegastrike-data <unfixed> (embed)
          NOTE: embeds many stdlib modules
-         - codespeak-lib <unfixed> (embed; bug #555420)
+         - codespeak-lib 1.1.1-1 (embed; bug #555420)
          NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
          - config-manager <unfixed> (embed; bug #555423)
          NOTE: embeds stdlib modules: optparse
-         - jhbuild <unfixed> (embed; bug #555421)
+         - jhbuild 2.28.0-1 (embed; bug #555421)
          NOTE: embeds stdlib modules: optparse, subprocess
          - smart <unfixed> (embed; bug #555432)
          NOTE: embeds stdlib modules: optparse
-         - pyprotocols <unfixed> (embed; bug #555433)
+         - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
          NOTE: embeds stdlib modules: doctest
-         - ruledispatch <unfixed> (embed; bug #555434)
+         - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
          NOTE: embeds stdlib modules: doctest
          - distribute <unfixed> (embed)
          NOTE: embeds stdlib modules: doctest
-Line 1166 
 python2.5
+Line 1234 
 python2.5
          NOTE: embeds stdlib modules: subprocess
          - coherence <unfixed> (embed; bug #555429)
          NOTE: embeds stdlib modules: uuid
-         - python-django-extensions <unfixed> (embed; bug #555430)
+         - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
          NOTE: embeds stdlib modules: uuid
          - setroubleshoot <unfixed> (embed; bug #555431)
          NOTE: embeds stdlib modules: uuid
-Line 1177 
 python2.5
+Line 1245 
 python2.5
          - kiwi <unfixed> (embed)
          NOTE: embeds msgfmt.py script
          - moin <unfixed> (embed)
-         NOTE: embeds msgfmt.py script
+         NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
          - plone3 <unfixed> (embed)
          NOTE: embeds msgfmt.py script
          - roundup <unfixed> (embed)
-         NOTE: embeds msgfmt.py script
+         NOTE: embeds msgfmt.py script, stdlib modules: cgitb
          - rednotebook <unfixed> (embed; bug #555415)
          NOTE: embeds msgfmt.py script
          - turbogears <unfixed> (embed)
-Line 1189 
 python2.5
+Line 1257 
 python2.5
          - elisa <unfixed> (embed)
          NOTE: embeds msgfmt.py script, stdlib modules: uuid
          - calibre <unfixed> (embed)
-         NOTE: embeds msgfmt.py script
+         NOTE: embeds msgfmt.py script, stdlib modules: zipfile
          - mailman <unfixed> (embed; #555416)
          NOTE: embeds msgfmt.py script
          - python-docutils <unknown> (embed)
-Line 1222 
 python2.5
+Line 1290 
 python2.5
          NOTE: embeds msgfmt.py script
          - python-formencode <unknown> (embed)
          NOTE: embeds msgfmt.py script
+         - duplicity <unfixed> (embed)
+         NOTE: embeds stdlib module: urlparse, tarfile
+         - pygopherd <unfixed> (embed)
+         NOTE: embeds stdlib module: zipfile
  argparse
          - twill <unfixed> (embed; bug #555347)
-Line 1333 
 cimg
+Line 1405 
 cimg
  mootools
          - gmic <itp> (embed)
+ openldap
+         - openldap2.3 <removed> (old-version)
+ grub2
+         - grub <unfixed> (old-version)
+ gnupginterface
+         - duplicity <unfixed> (embed)
+ python-dateutil
+         - awn-extras-applets <unfixed> (embed)
+         - matplotlib <unknown> (embed)
+ cups
+         - cupsys <removed> (old-version)
+ yui
+         - bcfg2 <not-affected> (present in source but not included in any binary files)
+         - serendipity <unfixed> (embed; bug #557746)
+         - moodle 1.8.2.dfsg-5 (embed)
+         - jifty <unfixed> (embed; bug #557748)
+         - webgui 7.7.26-1 (embed)
+         - loggerhead 1.17-1 (embed)
+ quake3 (vanilla source not packaged in debian)
+         - openarena <unfixable> (fork)
+ quake2 (vanilla source not packaged in debian)
+         - alien-arena <unfixable> (fork)
+         - warsow <unfixable> (fork)
+ libtheora
+         - iceweasel <not-affected> (uses xulrunner)
+         - xulrunner <unfixed> (embed; bug #540959)
+         [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
+         [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed; bug #559276)
+         [etch] - iceape <not-affected> (introduced in iceape 2.0)
+         [lenny] - iceape <not-affected> (introduced in iceape 2.0)
+ dtoa
+         - bfilter <unfixed> (embed)
+         - cacao <unfixed> (embed)
+         - cdrdao <unfixed> (embed)
+         - classpath <unfixed> (embed)
+         - freej <unfixed> (embed)
+         - iceape <unfixed> (embed)
+         - iceweasel <unfixed> (embed)
+         - jscoverage <unfixed> (embed)
+         - kde4libs <unfixed> (embed)
+         - kdelibs <unfixed> (embed)
+         - kompozer <unfixed> (embed)
+         - libv8 <unfixed> (embed)
+         - mono <unfixed> (embed)
+         - newlib <unfixed> (embed)
+         - nspr <unfixed> (embed)
+         - php5 <unfixed> (embed)
+         - polyml <unfixed> (embed)
+         - qt4-x11 <unfixed> (embed)
+         - rhino <unfixed> (embed)
+         NOTE: code translated to Java
+         - ruby1.8 <unfixed> (embed)
+         - ruby1.9 <unfixed> (embed)
+         - ruby1.9.1 <unfixed> (embed)
+         - sdd <unfixed> (embed)
+         - sfind <unfixed> (embed)
+         - star <unfixed> (embed)
+         - tinymux <unfixed> (embed)
+         - virtualbox-ose <unfixed> (embed)
+         - webkit <unfixed> (embed)
+         - xulrunner <unfixed> (embed)
+ ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
+         - firegpg <unfixed> (embed)
+         - enigmail <unfixed> (embed)
+ ptmalloc (not packaged in Debian)
+         - crystalspace <unfixed> (embed)
+         - qt4-x11 <unfixed> (embed)
+ svgalib
+         - usplash <unfixed> (embed)
+ bogl
+         - usplash <unfixed> (embed)
+ taglist
+         - usplash <unfixed> (embed)
+ portaudio
+         - audacity <unfixed> (embed; bug #323711)
+ nyquist
+         - audacity <unfixed> (embed)
+         NOTE: embeds a forked nyquist with support for a shared library
+ vamp-plugin-sdk
+         - audacity <unfixed> (embed)
+ wordpress
+         - libwordpress-xmlrpc-perl <unfixed> (embed) [./xmlrpc.php]

 Legend:



Removed from v.13267
 


changed lines


 
Added in v.13474
 Legend:



Removed from v.13267
 


changed lines


 
Added in v.13474
-Removed from v.13267
+Added in v.13474

	ViewVC Help
Powered by ViewVC 1.1.5