/[secure-testing]/data/embedded-code-copies

Diff of /data/embedded-code-copies

Parent Directory | Revision Log | View Patch Patch

-revision 14846 by nion,
Thu Jun 10 12:07:02 2010 UTC
+revision 15403 by geissert,
Thu Sep 30 18:43:21 2010 UTC
 Line 28 
 specific source package.
  Everything up to the next line is ignored.
  ---BEGIN
- xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
+ poppler
-         NOTE: Fixed packages link to poppler library unless otherwise noted
          - pdftohtml <unknown>
          [sarge] - pdftohtml <unfixed>
          [etch] - pdftohtml <unfixed>
-Line 45 
 xpdf (some srcpkgs use xpdf2 code, some
+Line 44 
 xpdf (some srcpkgs use xpdf2 code, some
          - ruby-gnome2 <unknown> (embed)
          - pdfedit <unfixed> (embed; bug #510794)
          - swftools <removed> (embed; bug #551293)
-         - poppler <unfixable> (fork)
+         - xpdf 3.02-9 (fork)
+ pdksh (no longer developed since 1999)
+         - mksh <unfixable> (fork)
+         - posh <unfixable> (fork)
  ppmd
          - libcomplearn-mod-ppmd <unfixed> (fork)
-Line 53 
 ppmd
+Line 56 
 ppmd
  libevent
          - transmission 1.71-1 (embed; bug #529372)
+         - chromium-browser 5.0.375.29~r46008-1
  lrmi
          - read-edid 2.0.0-1 (embed; bug #495131)
-Line 60 
 lrmi
+Line 64 
 lrmi
          - xresprobe <unfixed> (embed)
          - zhcon <unfixed> (embed)
+ php-htmlpurifier
+         - mahara 1.2.5-1 (embed)
+         - knowledgeroot 0.9.9.5-5 (embed)
+         - moodle <unfixed> (embed)
  peercast
          - gnome-peercast <removed> (embed)
          [etch] - gnome-peercast <unfixed> (embed)
-Line 76 
 libusb
+Line 85 
 libusb
  dietlibc
          - ccontrol 0.9.1+20071204-1 (static)
+         - mksh <unfixable> (static)
+         NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
  libmikmod
          - sdl-mixer1.2 <unfixed> (embed)
-Line 154 
 libbz2
+Line 165 
 libbz2
          NOTE: let's call it "static"
          - dar <unfixed> (static)
          - dump <unfixed> (static)
-         - unalz <unfixed> (embed)
+         - unalz 0.64-1 (embed)
          NOTE: has code, by the maint, to use the system version but links against the internal copy
+         - clamav <unfixed> (embed)
+         NOTE: libclamav/nsis/bzlib*
+         - pristine-tar <unfixable> (modified-embed)
+         NOTE: compression code only, not uncompression
  libyahoo2
          - centerim <unfixed> (embed; bug #559783)
-Line 203 
 lesstif (beware: two different lesstif A
+Line 218 
 lesstif (beware: two different lesstif A
          - openmotif <unfixed> (embed)
  libxpm
-         - lesstif <unfixed> (embed; bug #575750)
+         - lesstif2 <unfixed> (embed; bug #575750)
  kerberized apps with BSD origin
          - krb4 <removed> (embed)
-Line 224 
 fudforum
+Line 239 
 fudforum
  libbsd
          - rdate 1:1.2-3 (embed)
          - atheme-services <unfixed>
-         - libbsd-arc4random-perl <unfixed>
+         - libbsd-arc4random-perl <not-affected> (modified-embed)
+         NOTE: code not used, it links dynamically against libbsd instead
          - isakmpd <unfixed>
          - bsdgames <unfixed> (embed)
          - bsd-mailx <unfixed> (embed)
          - netcat-openbsd <unfixed> (embed; bug #550611)
          - openssh <unfixed> (embed)
          - unworkable <unfixed> (embed)
+         - mksh <unfixed> (modified-embed)
+         NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
+         NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
+         NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
  cvs
          - gcvs <unfixed> (embed)
-Line 261 
 pcre3
+Line 281 
 pcre3
          - ircd-hybrid <unfixed> (static)
          - emboss <unfixd>
          - cherokee <unfixed> (embed)
-         - oftc-hybrid <unfixed> (embed)
+         - oftc-hybrid 1.6.9.dfsg-1 (embed)
          - ratbox-services <unfixed> (embed)
          - squeak-vm <unfixed> (embed)
          - tinymux <unfixed> (embed)
-Line 314 
 ffmpeg (libavcodec/libavformat)
+Line 334 
 ffmpeg (libavcodec/libavformat)
          TODO: gimp-gap (potentially using ffmpeg code as well)
          - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
          - audacity 1.3.7-2 (embed; bug #512278)
+         - chromium-browser <unfixed> (fork)
  faad2
          - mplayer 1.0~rc2-20 (embed)
-Line 394 
 fckeditor
+Line 415 
 fckeditor
          - karrigell <removed> (embed; bug #452598)
          - gforge 4.6.99+svn6225-1 (embed)
          - request-tracker3.8 <unfixed> (embed)
          - otrs2 <unfixed> (embed)
  ipatlas (not packaged in Debian)
          - moodle <unfixed> (embed; bug #507185)
-Line 428 
 TinyMCE
+Line 449 
 TinyMCE
          - moodle <unfixed> (embed; bug #507185)
          - knowledgeroot <unfixed> (embed)
          - joomla <itp> (bug #326398)
+         - mahara <unfixed> (embed; #597752)
  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
          - scite <unfixed> (embed)
-Line 459 
 gzip
+Line 481 
 gzip
          - busybox <unfixed> (embed)
          - pristine-tar <unfixed> (modified-embed)
          NOTE: compression code only, not uncompression
+         - ncompress <unfixed> (old-version)
  neon
          - cadaver 0.22.3+debian-1 (embed; bug #188381)
-Line 517 
 gv
+Line 540 
 gv
          NOTE: evince-gtk is affected (a component of evince source package)
  libXbae
-         - paw <removed> (embed)
+         - paw <unfixed> (embed)
-         [etch] - paw <unfixed> (embed)
  libgtkhtml
          - claws-mail-extra-plugins <unfixed> (fork)
  libXaw
-         - paw <removed> (embed)
+         - paw <unfixed> (embed)
-         [etch] - paw <unfixed> (embed)
          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
  libgd2
-Line 608 
 lzo
+Line 629 
 lzo
  yassl
          - mysql-dfsg-5.0 <unfixed> (embed)
-         - mysql-dfsg-5.1 <unfixed> (embed)
+         - mysql-5.1 <unfixed> (embed)
  pax code
          - tar <unfixed> (embed)
-Line 669 
 glew
+Line 690 
 glew
          NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
          - trigger-rally 0.5.2.1-2 (embed)
          NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
+         - chromium-browser 5.0.375.70~r48679-2
  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
          - transcend <unfixed> (embed)
-Line 693 
 webkit
+Line 715 
 webkit
          - kde4libs <unfixable> (fork)
          NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
          NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
+         - chromium-browser <unfixed> (fork)
  ftgl
          - blender 2.46+dfsg-1 (embed)
-Line 761 
 prototypejs
+Line 784 
 prototypejs
          - libjson-ruby 1.1.4-1 (embed; bug #555224)
          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
          - horde3 <unfixed> (embed)
-         - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
+         - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
          - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
          - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
-         - ebug-http <removed> (embed; bug #555236)
+         - ebug-http <unfixed> (embed; bug #555236)
          - libaws 2.7-1 (embed; bug #555222)
          - phpgedview <removed> (embed)
          - poker-network 1.7.6-1 (embed; bug #555238)
-Line 776 
 prototypejs
+Line 799 
 prototypejs
          - exaile 0.2.14+debian-2.1 (embed; bug #555245)
          - hobix 0.5~svn20070319-4 (embed; bug #555247)
          - zabbix 1.6.6-4 (embed; bug #555250)
-         - chora2 <unfixed> (embed; bug #555253)
+         - chora2 2.1.1+debian0-1 (embed; bug #555253)
-         - gollem <unfixed> (embed; bug # 555254)
+         - gollem 1.1.1+debian0-1 (embed; bug # 555254)
          - jscropperui 1.2.1-1 (embed; bug #555257)
          - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
          - ingo1 1.2.3+debian0-1 (embed; bug #555261)
          - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
-         - activeldap <unfixed> (embed)
+         - activeldap 1.2.1-1 (embed)
          - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
          - mantis 1.1.2+dfsg-1 (embed; bug #555265)
          - otrs2 2.3.4-6 (embed; bug #555267)
-Line 796 
 prototypejs
+Line 819 
 prototypejs
          - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
          - xulrunner <unfixed> (embed)
          NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
+         - jclicmoodle <unfixed> (embed)
+         - git-cola <unfixed> (embed)
  gdb
          - insight <unfixed> (embed)
-Line 839 
 jquery
+Line 864 
 jquery
          NOTE: compressed file under examples/ dir
          - prewikka <unfixed> (embed)
          - libramaze-ruby <unfixed> (embed)
-         - drupal5 <unfixed> (embed)
+         - drupal6 <unfixed> (embed)
          - b2evolution <unfixed> (embed)
          - wesnoth <unfixed> (embed)
-Line 896 
 libmarkdown-php
+Line 921 
 libmarkdown-php
          - pixelpost 1.7.1-6 (embed)
  php-openid
-         - wordpress-openid <itp> (embed)
+         - wordpress-openid 3.3.2-1 (embed)
  geshi
          - dokuwiki 0.0.20080505-3.1 (embed)
-Line 991 
 libpng
+Line 1016 
 libpng
          [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
          - gamera 3.2.3-1 (embed)
          - freeimage <unfixed> (embed)
-         - tuxonice-userui (static)
+         - tuxonice-userui <unfixed> (static)
  irssi
          - silc-client <unfixed> (embed)
-Line 1042 
 nusoap
+Line 1067 
 nusoap
          - phpwiki <unfixed> (embed)
          - gallery2 <unfixed> (embed)
          - typo3-src <unfixed> (embed)
+         - phpgacl 3.3.7-7 (embed)
+         - mantis 1.1.8+dfsg-1 (embed)
  libept
          - adept <unfixed> (embed; bug #540649)
-Line 1101 
 icu
+Line 1128 
 icu
          - webkit 1.0.1-1 (embed; bug #547214)
          - texlive-bin <unfixed> (fork)
          NOTE: texlive upstream working with icu upstream to merge their changes
+         - chromium-browser 5.0.375.29~r46008-3
  cyrus-imapd-2.2
          - kolab-cyrus-imapd <unfixed> (fork)
-Line 1145 
 expat
+Line 1173 
 expat
          - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
          - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
          - python2.4 <unfixable> (embed; bug #553403)
+         - python2.7 2.7-6 (embed)
          - python-4suite <unfixed> (embed; bug #516935)
          - wxwindows2.4 <removed> (embed)
          - wxwidgets2.6 2.6.3.2.2-4 (embed)
-Line 1187 
 expat
+Line 1216 
 expat
          - texlive-bin <not-affected> (Embedded code not compiled in)
          - vnc4 <unfixed> (embed)
          - xotcl 1.6.6-1 (embed)
+         - chromium-browser 5.0.375.29~r46008-3
  xerces-c
          - xerces-c2 <unfixed> (old-version)
-Line 1204 
 enet
+Line 1234 
 enet
  eglibc
          - glibc <removed> (old-version)
+         - mksh <unfixable> (static)
+           NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
  galib
          - gamera 3.2.3-1 (embed)
-Line 1285 
 python2.5
+Line 1317 
 python2.5
          NOTE: embeds stdlib modules: ConfigParser
          - museek+ <unfixed> (embed; bug #555428)
          NOTE: embeds stdlib modules: ConfigParser
-         - vegastrike-data <unfixed> (embed)
+         - vegastrike-data <removed> (embed)
          NOTE: embeds many stdlib modules
          - codespeak-lib 1.1.1-1 (embed; bug #555420)
          NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
-Line 1315 
 python2.5
+Line 1347 
 python2.5
          NOTE: embeds stdlib modules: uuid
          - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
          NOTE: embeds stdlib modules: uuid
-         - setroubleshoot <unfixed> (embed; bug #555431)
+         - setroubleshoot <removed> (embed; bug #555431)
          NOTE: embeds stdlib modules: uuid
          - linkchecker <unfixed> (embed; bug #555414)
          NOTE: embeds msgfmt.py script
-Line 1397 
 distribute
+Line 1429 
 distribute
          - setuptools <removed> (old-version)
  rails
-         - jruby1.2 <unfixed> (embed) [./bench/rails/*]
+         - jruby1.2 <removed> (embed) [./bench/rails/*]
+         NOTE: jruby is in non-free, it probably includes rails too
          - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
          - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
          - thin <unfixed> (embed) [./spec/rails_app/*]
-Line 1482 
 horde3 (prototype.js is among the embeds
+Line 1515 
 horde3 (prototype.js is among the embeds
          NOTE: Text_Diff (wp-includes/Text/Diff*)
  cimg
-         - gmic <itp> (embed)
+         - gmic <unfixed> (embed)
  mootools
-         - gmic <itp> (embed)
+         - kdenetwork <unfixed> (embed)
+         - gallery <unfixed> (embed)
+         - jspwiki <unfixed> (embed)
+         - vdr-plugin-live <unfixed> (embed)
+         - perl-doc-html <unfixed> (embed)
  openldap
          - openldap2.3 <removed> (old-version)
-Line 1510 
 yui
+Line 1547 
 yui
          - jifty 0.91117-1 (embed; bug #557748)
          - webgui 7.7.26-1 (embed)
          - loggerhead 1.17-1 (embed)
+         - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
  quake3 (vanilla source not packaged in debian)
          - openarena <unfixable> (fork)
-Line 1529 
 libtheora
+Line 1567 
 libtheora
  dtoa
          - bfilter <unfixed> (embed)
-         - cacao <unfixed> (embed)
+         - cacao <removed> (embed)
          - cdrdao <unfixed> (embed)
          - classpath <unfixed> (embed)
          - freej <unfixed> (embed)
-Line 1620 
 libtool
+Line 1658 
 libtool
          - graphviz 2.8-3 (embed)
          NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
          - guile-1.6 1.6.8-7 (embed)
-         - hamlib <unfixed> (embed)
+         - hamlib 1.2.11-1 (embed)
          - hercules 3.06-1.2 (embed)
          - jags 1.0.4-3 (embed; bug #560864)
          - kdelibs <unfixed> (embed)
-Line 1715 
 libm (provided by libc)
+Line 1753 
 libm (provided by libc)
          - tuxonice-userui <unfixed> (static)
          - zsh <unfixed> (static)
          NOTE: zsh-static
+         - tripwire <unfixed>
  streflop
          - spring <unfixed> (embed)
-Line 1775 
 maildrop
+Line 1814 
 maildrop
          - courier <unfixed> (embed) [./maildrop]
  glee
-         - warzone2100 <unfixed> (embed)
+         - warzone2100 <not-affected> (embed)
  phing
          - symfony <unfixed> (embed)
-Line 1842 
 libjpeg (don't know what exact version)
+Line 1881 
 libjpeg (don't know what exact version)
          - dcmtk <unfixed>
          - gdcm <unfixed>
          - insighttoolkit <unfixed>
-         - openarena <unfixed>
+         - openarena <unfixed> (bug #495966)
          - outguess <unfixed>
          - squeak-vm <unfixed> (embed)
          - tremulous <unfixed>
-Line 1860 
 libjpeg (don't know what exact version)
+Line 1899 
 libjpeg (don't know what exact version)
  lxr
-         - lxr-cvs (embed)
+         - lxr-cvs <unfixed> (embed)
  libfile-copy-recursive-perl
          - r-base <unfixed> (embed; bug #577427)
-Line 1910 
 unzip
+Line 1949 
 unzip
  jbig2dec
          - ghostscript 8.71~dfsg2-1 (embed)
+ libxml2
+         - chromium-browser 5.0.375.29~r46008-1
+ protobuf
+         - chromium-browser 5.0.375.70~r48679-2
+ libv8
+         - chromium-browser 5.0.375.38~r46659-1
+ nspr
+         - chromium-browser 5.0.375.29~r46008-3
+ yasm
+         - chromium-browser 5.0.375.29~r46008-2
+ libxslt
+         - chromium-browser 5.0.375.29~r46008-1
+ miniupnpc (not packaged in Debian; ITP bug #444392)
+         - warzone2100 <unfixed> (embed)
+ iniparser (not packaged in Debian; RFP bug #582657)
+         - warzone2100 <unfixed> (modified-embed)
+ pyglet
+         - sympy <unfixed> (embed; bug #459716)
+ mpmath
+         - sympy <unfixed> (embed; bug #541746)

 Legend:



Removed from v.14846
 


changed lines


 
Added in v.15403
 Legend:



Removed from v.14846
 


changed lines


 
Added in v.15403
-Removed from v.14846
+Added in v.15403

	ViewVC Help
Powered by ViewVC 1.1.5