/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3064 by jmm-guest, Thu Dec 15 23:01:23 2005 UTC revision 13248 by jwilk-guest, Mon Nov 9 15:00:44 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
7  kdegraphics/kpdf  
8  tetex-bin (the very latest tetex-bin started to use poppler)  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor  
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embedding a copy of the library into another source package)
19          fork (the package is not just embedding code but it is a fork and
20                thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24    The srcpkg might be some string to identify the code if there is no
25    specific source package.
26    
27    Everything up to the next line is ignored.
28    ---BEGIN
29    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30            NOTE: Fixed packages link to poppler library unless otherwise noted
31            - pdftohtml <unknown>
32            [sarge] - pdftohtml <unfixed>
33            [etch] - pdftohtml <unfixed>
34            NOTE: has been replaced by poppler-utils
35            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36            - texlive-base 3.0-12 (embed)
37            - texlive-bin 2007-1 (embed)
38            NOTE: links to poppler
39            - koffice <unfixed> (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50    ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59    
60    peercast
61            - gnome-peercast <removed> (embed)
62            [etch] - gnome-peercast <unfixed> (embed)
63    
64    silc-toolkit
65            - silc-client 1.1~beta6-1 (embed)
66    
67    icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71    dietlibc
72            - ccontrol 0.9.1+20071204-1 (static)
73    
74    libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78    libiax
79            - iaxmodem <unfixable> (embed; bug #548885)
80    
81    spandsp
82            - iaxmodem <unfixable> (embed; bug #548885)
83    
84    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85            - dpkg <unfixed> (embed)
86            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87            - rsync <unfixed> (embed)
88            NOTE: somehow derived code base
89            - mono <unfixed> (embed)
90            TODO: check mozilla
91            - Linux kernels <unfixed> (embed)
92            - pvpgn 1.7.8-2 (embed)
93            - mrtg 2.12.2-1 (embed)
94            - rpm <unknown> (embed)
95            NOTE: pinged anibal since when rpm was fixed
96            - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98            - tra <unfixed>
99            - sash <unfixed>
100            - nsis <unfixed>
101            - mseide-msegui <unfixed>
102            NOTE: mseide
103            - mirrordir <unfixed>
104            - poco <unfixed>
105            - klibc <unfixed>
106            - ghostscript <unfixed>
107            - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112            - perl <unfixed>
113            - paraview <unfixed>
114            - gcvs <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125            - gamera 3.2.3-1 (embed)
126            - python2.4 <unfixed> (embed; bug #553403)
127            - python2.5 <unfixed> (embed; bug #553403)
128    
129    dulwich
130            - hg-git 0.1.0-1 (embed; bug #541996)
131    
132    libvigraimpex
133            - hugin <unfixed> (embed; bug #542259)
134            - enblend-enfuse <unfixed> (embed; bug #542258)
135            - gamera 3.2.3-1 (embed)
136    
137    libbz2
138            - dpkg <unfixed> (static)
139    
140    libgadu
141            - centericq <unfixed> (embed)
142            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144            - kdenetwork 4:3.3.2-5 (embed)
145            NOTE: from kdenetwork: kopete
146            - ekg 1:1.8~rc0-1 (embed)
147            - kadu 0.6.0.2-3 (embed; bug #504430)
148            - gadu <itp> (embed)
149    
150    xmlrpc (which package is the "origin" of this code?)
151            - drupal <unfixed> (embed)
152            - phpgroupware <unfixed> (embed)
153            - egroupware <unfixed> (embed)
154            - phpwiki <unfixed> (embed)
155            - php4 <unfixed> (embed)
156            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157    
158    shtool (affects build-time only)
159            - mysql-ocaml <unfixed> (embed)
160            - php4 <unfixed> (embed)
161    
162    iceape
163            - iceweasel <unfixed> (fork)
164            - icedove <unfixed> (fork)
165            - xulrunner <unfixed> (fork)
166            - kompozer <unfixed> (embed; bug #532168)
167    
168    xli
169            - xloadimage <unfixed> (embed)
170    
171    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
172            - openmotif <unfixed> (embed)
173            - libxpm <unfixed> (embed)
174    
175    kerberized apps with BSD origin
176            - krb4 <removed> (embed)
177            - krb5 <unfixed> (embed)
178            - heimdal <unfixed> (embed)
179    
180    grip (which pkg is the origin?)
181            - libcdaudio <unfixed>
182            - grip <unfixed>
183            - gnome-vfs <unfixed>
184            TODO: check vfs2 as well
185    
186    fudforum
187            [etch] - phpgroupware <unfixed> (embed)
188            NOTE: phpgroupware-fudforum
189            [sarge] - egroupware-fudforum <removed> (embed)
190    
191    libbsd
192            - rdate 1:1.2-3 (embed)
193            - atheme-services <unfixed>
194            - libbsd-arc4random-perl <unfixed>
195            - isakmpd <unfixed>
196    
197    cvs
198            - gcvs <unfixed> (embed)
199            NOTE: see cvsunix/src in tarball
200    
201    pcre3
202            - php4 <unknown> (embed)
203            - analog 2:5.23-0woody1 (embed)
204            - goffice <unfixed> (embed)
205            NOTE: libgoffice-*
206            - vfu 4.06-4.1 (embed; bug #450754)
207            - tf5 5.0beta7-1 (embed)
208            - monotone 0.43-1 (embed)
209            NOTE: this only affects versions >= 0.37
210            - glib2.0 2.15.2-1 (embed)
211            - apache2 2.0.53-4 (embed)
212            - exim4 4.10-0.srh20.12 (embed)
213            - yacas <unfixed> (embed)
214            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
215            - gtamsanalyzer.app 0.42-5 (embed)
216            - tin 980117-1 (embed)
217            - kazehakase 0.5.2-1
218            - webkit 1.0.1-1 (embed)
219            - qt4-x11 <unfixed> (embed)
220            NOTE: embedded via webkit copy
221            - erlang <unfixed> (embed)
222    
223    tiff
224            - wxwindows2.4 2.2.1 (embed)
225            - gamera 3.2.3-1 (embed)
226    
227    uudeview
228            - libconvert-uulib-perl <unfixed> (embed)
229            - pan <unfixed> (embed)
230    
231    sqlite (not affected by security vulnerabilities so far)
232            - amarok <unfixed> (embed)
233            - monotone 0.43-1 (embed)
234            - iceweasel <unfixed> (embed)
235    
236    util-linux/mount
237            - loop-aes-utils <unfixed> (embed)
238            NOTE: contains code from util-linux' mount in the mount-aes-udeb
239    
240    sylpheed
241            - sylpheed-claws <unfixed> (fork)
242    
243    phpsysinfo
244            - egroupware <unfixed> (embed)
245            - phpgroupware <unfixed> (embed)
246    
247    phpldapadmin
248            [sarge] - egroupware <unfixed> (embed)
249            NOTE: removed from egroupware after sarge
250    
251    chmlib
252            - kchmviewer <unknown> (embed)
253    
254    ffmpeg (libavcodec/libavformat)
255            - mplayer 1.0~rc2-14 (embed; bug #395252)
256            - kino 1.0.0-1
257            - vlc <not-affected> (Links dynamically since initial release)
258            - smilutils 0.3.0-10
259            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
260            - motion 3.1.19-1
261            - gstreamer0.10-ffmpeg 0.10.3-2
262            - xmovie <removed> (static)
263            TODO: gimp-gap (potentially using ffmpeg code as well)
264            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
265    
266    faad2
267            - mplayer 1.0~rc2-20 (embed)
268            - avifile <unfixed> (embed; bug #538750)
269    
270    libmad (MPEG decoding lib)
271            - xine-lib <unfixed> (embed)
272            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
273            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
274    
275    libdts
276            - xine-lib <unfixed> (embed)
277    
278  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  flac
279  dpkg          - xine-lib <unfixed> (embed)
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
   
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino(?)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
280    
281  mad MPEG decoding lib:  liba52
282  mad          - a52dec <unfixed> (embed)
283  xine-lib          - xine-lib <unfixed> (embed)
284    
285    libmpeg2
286            - mpeg2dec <unfixed> (embed)
287            - xine-lib <unfixed> (embed)
288    
289    libntlm
290            - wget <unfixed> (fork; bug #550436)
291            - curl <unfixed> (fork; bug #550437)
292            - cntlm <unfixed> (fork; bug #550438)
293    
294    uw-imap
295            - pine <unfixed> (embed)
296            - alpine <unfixed> (embed)
297    
298    imagemagick
299            - graphicsmagick <unfixed> (fork)
300    
301    python-urlgrabber
302            - mercurial <unfixed> (embed; bug #531062)
303            - w3af <unfixed> (embed; bug #555372)
304            [experimental] - harvestman <unfixed> (embed; bug #555373)
305    
306    beautifulsoup
307            - python-mechanize <unfixed> (embed; bug #555349)
308            - zope2.11 <unfixed> (embed; bug #555350)
309            - twill <unknown> (embed; bug #555351)
310    
311    halibut
312            - nsis <unfixed> (fork)
313    
314    libghttp
315            - hotway <unfixed> (embed)
316    
317    libsndfile
318            - ardour 1:2.7.1-1 (embed)
319    
320    glibmm2.4
321            - ardour 1:2.7.1-1 (embed)
322    
323    libgnomecanvasmm2.6
324            - ardour 1:2.7.1-1 (embed)
325    
326    libsigc++-2.0
327            - ardour 1:2.7.1-1 (embed)
328    
329    soundtouch
330            - ardour 1:2.7.1-1 (embed)
331    
332    libmms
333            - xine-lib <unfixed> (embed)
334            - mimms <unfixed> (embed)
335    
336    fckeditor
337            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
338            - moin 1.8.2-2 (embed; bug #452599)
339            - karrigell <removed> (embed; bug #452598)
340            - gforge 4.6.99+svn6225-1 (embed)
341            - request-tracker3.8 <unfixed> (embed)
342    
343    ipatlas (not packaged in Debian)
344            - moodle <unfixed> (embed; bug #507185)
345    
346    libphp-phpmailer
347            - moodle <unfixed> (embed; bug #507185)
348            - mahara <unfixed> (embed)
349            - symfony <unfixed> (embed)
350            [etch] - phpgroupware <unfixed> (embed)
351            NOTE: phpgroupware-felamimail is only in etch
352            - egroupware <unfixed> (embed; bug #504283)
353            - glpi <unfixed>
354    
355    htmlArea (not packaged in Debian)
356            - moodle <unfixed> (embed)
357    
358    giflib
359            - wine <unfixed> (embed; bug #466181)
360    
361    bennu (not packaged in Debian, http://bennu.sourceforge.net)
362            - moodle <unfixed> (embed)
363    
364    smarty
365            - moodle 1.8.2-2 (embed; bug #471158)
366            - gallery2 2.2.5-2 (embed; bug #471160)
367            - mahara 0.9.2-2 (embed; bug #471201)
368            - gosa 2.4beta1-1 (embed; bug #471200)
369    
370    TinyMCE
371            - wordpress 2.5.1-3 (embed; bug #478257)
372            - moodle <unfixed> (embed; bug #507185)
373            - knowledgeroot <unfixed> (embed)
374            - joomla <itp> (bug #326398)
375    
376    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
377            - scite <unfixed> (embed)
378            - qscintilla <unfixed> (embed)
379            - qscintilla2 <unfixed> (embed)
380            - geany <unfixed> (fork)
381            - anjuta <unfixed> (embed)
382    
383    libphp-adodb
384            - moodle <unfixed> (embed; bug #507185)
385            NOTE: also AdoDB-XML Schema
386            - gallery2 <unfixed> (embed)
387            - phppgadmin <unfixed> (embed)
388            - egroupware <unfixed> (embed)
389            - phpwiki <unfixed> (embed)
390            - torrentflux 2.0beta1-2 (embed)
391            - ipplan <unfixed> (embed)
392            - typo3-src <unfixed> (embed)
393            - cacti <unknown> (embed)
394            [sarge] - cacti <unfixed> (embed)
395            NOTE: dependency exists, but internal version is used
396            - gforge 4.7~rc2-6 (embed)
397            - mahara <unfixed> (embed)
398    
399    gzip
400            - linux-kernel <unfixed> (embed)
401            NOTE: lib/inflate.c
402            - klibc <unfixed> (embed)
403            NOTE: based on linux-kernel gzip code
404            - busybox <unfixed> (embed)
405    
406    neon
407            - cadaver 0.22.3+debian-1 (embed; bug #188381)
408            - gnome-vfs2 <unfixed> (embed; bug #395874)
409            [etch] - litmus <unfixed> (embed; #395875)
410            - litmus <removed> (embed; #395875)
411            [sarge] - screem <unfixed> (embed)
412            - sitecopy 1:0.16.3-5 (embed; bug #395876)
413            [etch] - tla <unfixed> (embed; bug #395877)
414            [sarge] - tla <unfixed> (embed; bug #395877)
415    
416    libmodplug
417            - gst-plugins-bad0.10 <unfixed> (embed)
418    
419    libvncserver
420            - vino <unfixed> (embed)
421    
422    putty
423            - filezilla <unfixed> (embed)
424    
425    tinyxml (not packaged in Debian)
426            - filezilla <unfixed>
427    
428    gv
429            - evince <unfixed> (embed)
430            NOTE: ps/ tree from gv 3.5.8
431            NOTE: evince-gtk is affected (a component of evince source package)
432    
433    libXbae
434            - paw <removed> (embed)
435            [etch] - paw <unfixed> (embed)
436    
437    libgtkhtml
438            - claws-mail-extra-plugins <unfixed> (fork)
439    
440    libXaw
441            - paw <removed> (embed)
442            [etch] - paw <unfixed> (embed)
443            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
444    
445    libgd2
446            - graphviz <unfixed> (embed)
447            NOTE: lib/gd seems to be 2.0.33
448            - wml <unfixed> (embed)
449            - libwmf <unfixed> (embed)
450            NOTE: derived from gd 1.6.3
451    
452    rar
453            - unrar-nonfree <unfixed> (embed)
454    
455    unrar-free (maybe this code is derived from the original rar, too?)
456            - clamav <unfixed> (embed)
457            NOTE: seems to be disabled in default config
458    
459    mplayer (DirectMedia Object loader)
460            - xine-lib <unfixed> (embed)
461            NOTE: src/libw32dll/
462            - vlc <unfixed> (embed)
463            NOTE: modules/codec/dmo/
464            - mplayer 1.0~rc2-20 (embed)
465    
466    libwpd (WordPerfect converter)
467            - openoffice.org <unfixed> (embed)
468    
469    fsplib (http://sourceforge.net/projects/fsp/)
470            - gftp <unfixed> (embed)
471            NOTE: lib/fsplib version 0.3
472    
473    sprng
474            - tree-puzzle <unfixed> (embed)
475    
476    librpcsecgss
477            - krb5 <unfixed> (embed)
478    
479    jasper
480            - ghostscript <unfixed> (embed)
481            - gs-gpl <unfixed> (embed)
482    
483    libiris
484            - psi <unfixed> (embed)
485            - kdenetwork <unfixed> (embed)
486            NOTE: kopete embeds libiris but links dynamically to libidn
487            - kdegames <unfixed> (embed)
488            NOTE: ksirk/kde4
489    
490    libidn
491            - monotone 0.43-1 (embed)
492            - psi <unfixed> (embed)
493            NOTE: psi embeds libiris which embeds libidn
494            - kdegames <unfixed> (embed)
495            NOTE: kdegames/kde4 embeds libiris which embeds libidn
496    
497    liblua
498            - monotone 0.43-1 (embed)
499            - nmap 5.00-1 (embed; bug #527997)
500            [lenny] - nmap <unfixed> (embed; bug #527997)
501    
502    libbotan
503            - monotone 0.43-1 (embed)
504    
505    NetXX
506            - monotone 0.43-1 (embed)
507    
508    libgc
509            - mono <unfixed> (embed)
510    
511    lzma
512            - p7zip <unfixed> (embed)
513            - xz-utils <unfixed> (fork)
514    
515    lzo
516            - grub2 <unfixed> (embed)
517    
518    yassl
519            - mysql-dfsg-5.0 <unfixed> (embed)
520    
521    pax code
522            - tar <unfixed> (embed)
523            - cpio <unfixed> (embed)
524    
525    t1lib
526            - tetex-bin 2.0.2-1 (embed)
527            - texlive-bin <unknown> (embed)
528    
529    guichan
530            - boswars <unfixed> (embed)
531            NOTE: maintainer notified us, working on it
532    
533    tolua
534            - boswars <unfixed> (embed)
535            NOTE: maintainer notified us, working on it
536    
537  libdts:  asio-dev
538  libdts          - luxrender <removed> (embed)
 xine-lib  
539    
 flac:  
 flac  
540  xine-lib  xine-lib
541            - vlc <unfixed> (embed)
542            NOTE: only parts included in modules/access/rtsp
543    
544  liba52:  netpbm
545  a52dec          - tcl8.3 <unfixed> (embed)
546  xine-lib          - tcl8.4 <unfixed> (embed)
547            - tcl8.5 <unfixed> (embed)
548            NOTE: generic/tkImgGIF.c
549    
550    tk8.5
551            - tk8.0 <removed> (old-version)
552            - tk8.3 <unfixed> (old-version)
553            - tk8.4 <unfixed> (old-version)
554            - perl-tk <unfixable> (fork)
555    
556    samba
557            - mc 2:4.6.2~git20080311-1 (embed)
558            NOTE: maintainer is aware of this, currently searching a solution
559    
560    plib1.8.4c2
561            - boson <unfixed> (fork)
562            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
563    
564    fribidi
565            - quesoglc <unfixed> (embed)
566            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
567    
568    glew
569            - quesoglc <unfixed> (embed; bug #489341)
570            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
571    
572    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
573            - transcend <unfixed> (embed)
574            - cultivation <unfixed> (embed)
575            - passage <unfixed> (embed)
576            - gravitation <unfixed> (embed)
577    
578    tar
579            - libarchive <unfixed> (embed)
580            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
581    
582    cpio
583            - libarchive <unfixed> (embed)
584            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
585    
586    webkit
587            - qt4-x11 <unfixed> (embed)
588    
589    ftgl
590            - blender 2.46+dfsg-1 (embed)
591    
592    wv
593            - abiword <unfixed>
594    
595    qemu
596            - kvm <unfixed> (embed; bug #543159)
597            - xen-3 <unfixed> (embed)
598            - xen-unstable <unfixed> (embed)
599    
600    vgabios
601            - kvm <unfixed> (embed; bug #489442)
602    
603    bochs
604            - kvm <unfixed> (embed; bug #489442)
605    
606    speex
607            - vorbis-tools <unfixed> (embed)
608            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
609            - gst-plugins-good0.10 <unfixed> (embed)
610            - xine-lib <unfixed> (embed)
611            - libfishsound <unfixed> (embed)
612            - libannodex <unfixed> (embed)
613            - vlc <unfixed> (embed)
614            - xmms-speex <unfixed> (embed)
615            - libsdl-sound1.2 <unfixed> (embed)
616            - sweep <unfixed> (embed)
617    
618    libreadline
619            - magic <itp> (old-version)
620    
621    opcode
622            - ode <unfixed> (embed)
623            NOTE: opcode is not a package in debian, it is just embedded
624            NOTE: http://www.codercorner.com/Opcode.htm
625    
626    gimpact
627            - ode <unfixed> (embed)
628            NOTE: gimpact is not a package in debian, it is just embedded
629            NOTE: http://gimpact.sf.net
630    
631    mochikit
632            - mahara <unfixed> (embed)
633            NOTE: they require extra patches, still unmerged upstream
634            - ntop <unfixed> (embed)
635            - coherence 0.6.2-1 (embed)
636            - paste <unfixed> (embed)
637            - turbogears <unfixed> (embed)
638            - plone3 <unfixed> (embed)
639            - xulrunner <unfixed> (embed)
640            - libjifty-plugin-chart-perl <unfixed> (embed)
641            - sabnzbdplus <unfixed> (embed)
642            - tgmochikit <unfixed> (embed)
643    
644    prototypejs
645            - netbeans-ide 6.0.1+dfsg-2 (embed)
646            - auth2db <unfixed> (embed; bug #555218)
647            - webcit <unfixed> (embed; bug #555219)
648            - asterisk 1:1.6.2.0~rc3-1 (embed)
649            - libjson-ruby <unfixed> (embed; bug #555224)
650            - lucene2 <unfixed> (embed; bug #555226)
651            - horde3 <unfixed> (embed)
652            - knowledgeroot <unfixed> (embed; bug #555230)
653            - mediatomb <unfixed> (embed; bug #555233)
654            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
655            - ebug-http <unfixed> (embed; bug #555236)
656            - phpgedview <removed> (embed)
657            - poker-network <unfixed> (embed; bug #555238)
658            - rails 2.1.0-6 (embed)
659            - wordpress 2.5.0-2 (embed; bug #555243)
660            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
661            TODO: search through all of the other zope packages
662            - ampache 3.4.1-2 (embed)
663            - exaile <unfixed> (embed; bug #555245)
664            - hobix <unfixed> (embed; bug #555247)
665            - zabbix <unfixed> (embed; bug #555250)
666            - chora2 <unfixed> (embed; bug #555253)
667            - gollem <unfixed> (embed; bug # 555254)
668            - jscropperui <unfixed> (embed; bug #555257)
669            - scriptaculous <unfixed> (embed; bug #555260)
670            - ingo1 <unfixed> (embed; bug #555261)
671            - kronolith2 <unfixed> (embed; bug #555262)
672            - activeldap <unfixed> (embed)
673            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
674            - mantis <unfixed> (embed; bug #555265)
675            - otrs2 <unfixed> (embed; bug #555267)
676            - webcalendar <unfixed> (embed; bug #555269)
677            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
678            - jifty <unfixed> (embed; bug #555271)
679            - jquery <unfixed> (embed; bug #555272)
680            - passenger <unfixed> (embed; bug #555273)
681            - plone3 <unfixed> (embed; bug #555275)
682            - wesnoth <unfixed> (embed; bug #555277)
683            - xulrunner <unfixed> (embed)
684            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
685    
686    gdb
687            - insight <unfixed> (embed)
688    
689    e2fsprogs
690            - ldiskfsprogs <unfixable> (fork)
691    
692    quazip (not packaged in Debian)
693            - qcake <unfixed> (embed)
694            NOTE: starting with upstream version 0.6.4
695    
696    exo
697            - pcmanfm <unfixed> (embed; bug #499677)
698            NOTE: slightly modified source code
699    
700    java
701            - openjdk-6 <unfixed>
702            - sun-java5 <unfixed>
703            - sun-java6 <unfixed>
704    
705    libphp-snoopy
706            - ampache 3.4.1-2 (embed; bug #504169)
707            - mahara 1.0.5-2 (embed; bug #504170)
708            - pixelpost 1.7.1-5 (embed; bug #504171)
709            - mediamate 0.9.3.6-5 (embed; bug #504172)
710            - opendb <removed> (embed; bug #504173)
711            [etch] - opendb <unfixed> (embed; bug #504173)
712            - wordpress 2.5.1-9 (embed; bug #443948)
713            - moodle <unfixed> (embed; bug #507185)
714            [etch] - phpgroupware <unfixed> (embed)
715            NOTE: phpgroupware-felamimail
716            - magpierss 0.72-3 (embed; bug #431089)
717    
718    jquery
719            - zekr <unfixed> (embed)
720            - wordpress <unknown> (embed)
721            - yocto-reader <unfixed> (embed)
722            - textpattern <unfixed> (embed)
723            - genshi 0.5.1-1 (embed)
724            NOTE: compressed file under examples/ dir
725            - prewikka <unfixed> (embed)
726            - libramaze-ruby <unfixed> (embed)
727            - drupal5 <unfixed> (embed)
728            - b2evolution <unfixed> (embed)
729            - wesnoth <unfixed> (embed)
730    
731    tablesorter (jquery plugin, not packaged yet)
732            - wesnoth <unfixed> (embed)
733    
734    kses
735            - wordpress <unfixed> (embed; bug #504242)
736            NOTE: their copy has all methods renamed to wp_<foo>
737            NOTE: kses isn't in Debian, RFP: #504240
738            - moodle <unfixed> (embed; bug #507185)
739            - egroupware <unfixed> (embed)
740    
741    magpierss
742            - wordpress <unfixed> (embed; bug #504242)
743            - moodle <unfixed>
744    
745    php-gettext
746            - wordpress 2.8.4-1 (embed; bug #504242)
747    
748    libphp-ixr (name may change, it is the Incutio XML-RPC)
749            - wordpress <unfixed> (embed; bug #504242)
750            NOTE: libphp-ixr isn't in Debian, RFP: #504236
751            - dokuwiki <unfixed> (embed)
752            - textpattern <unfixed> (embed)
753    
754    libphp-cas
755            - glpi <unfixed> (embed)
756            - moodle <unfixed> (embed; bug #505984)
757    
758    scriptaculous (prototype.js is among the embeds in the following)
759            - glpi <unfixed> (embed)
760            - libaws <unfixed> (embed; bug #555222)
761            - op-panel <unfixed> (embed)
762            - symfony <unfixed> (embed)
763            NOTE: maintainer says there are extra incompatible changes required
764            - pixelpost <unfixed> (embed)
765            - webhelpers <unfixed> (embed)
766            - qwik <unfixed> (embed; bug #555241)
767            - smokeping <unfixed> (embed)
768            - turba2 <unfixed> (embed)
769            - typo3-src 4.2.3-1 (embed)
770            - request-tracker3.6 <unfixed> (embed)
771            - request-tracker3.8 <unfixed> (embed)
772            - rt-extension-emailcompletion <unfixed> (embed)
773    
774    libmarkdown-php
775            - moodle <unfixed> (embed; bug #507185)
776            - pixelpost <unfixed> (embed)
777    
778    php-openid
779            - wordpress-openid <itp> (embed)
780    
781    geshi
782            - dokuwiki 0.0.20080505-3.1 (embed)
783            - pgfouine 1.0-1.1 (embed)
784            - websvn 2.1.0-1 (embed)
785    
786    webcalendar
787            - gforge 4.7~rc2-6 (embed; bug #504758)
788    
789    libical
790            - kdepim <unfixed> (fork)
791            - kdepimlibs <unfixed> (fork)
792            NOTE: fixed in KDE4 post 4.1.x series
793            - claws-mail-extra-plugins <unfixed> (fork)
794    
795    libltdl3
796            - kdelibs <unfixed> (embed)
797            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
798            - synfig <unfixed> (embed)
799    
800    harfbuzz
801            - qt4-x11 <unfixed> (embed)
802    
803    libzip
804            - php5 <unfixed> (fork)
805            - odt2txt <unfixed> (embed; bug #523808)
806    
807    json.php (not packaged; should be replaced with php's built-in functions)
808            - moodle <unfixed>
809            - yui <unfixed>
810            - gallery2 <unfixed>
811            - dokuwiki <unfixed>
812            - typo3-src <unfixed>
813    
814    php-fpdf
815            - tcpdf <itp> (fork)
816            - moodle <unfixed>
817            - phpwiki <unfixed>
818            - egroupware <unfixed>
819            - ldap-account-manager <unfixed> (fork)
820    
821    tcpdf (itp: #495985)
822            - moodle <unfixed>
823            - phpmyadmin <unfixed>
824    
825    typo3
826            - moodle <unfixed>
827    
828    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
829            - moodle <unfixed>
830            - gosa <unfixed>
831    
832    php-ole (itp: #487558)
833            - moodle <unfixed>
834    
835    pieforms (http://www.catalyst.net.nz)
836            - mahara <unfixed>
837    
838    savant2 (http://phpsavant.com)
839            - egroupware <unfixed>
840    
841    rssparser (http://nwow.org)
842            - egroupware <unfixed>
843            - phpgroupware <unfixed>
844    
845    lcms
846            - openjdk-6 <unfixed> (fork)
847    
848    libphp-phplayersmenu
849            - diogenes <unfixed>
850            - phpldapadmin <unfixed>
851    
852    libphp-pclzip
853            - docvert <unfixed>
854            - moodle <unfixed>
855            - egroupware <unfixed>
856    
857    libphp-simplepie
858            - dokuwiki <unfixed>
859    
860    libphp-jpgraph
861            - egroupware <unfixed>
862    
863    php-simpletest
864            - moodle <unfixed>
865    
866    libpng
867            - iceweasel <not-affected> (uses xulrunner)
868            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
869            - iceape 1.0.13~pre080614i-0etch1 (embed)
870            - xulrunner 1.9.0.13-1 (embed)
871            [lenny] - xulrunner 1.9.0.11-0lenny1
872            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
873            - gamera 3.2.3-1 (embed)
874    
875    irssi
876            - silc-client <unfixed> (embed)
877            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
878    
879    extc
880            - mtasc <unfixed> (embed)
881            - haxe <unfixed> (embed)
882    
883    swflib
884            - mtasc <unfixed> (embed)
885            - haxe <unfixed> (embed)
886    
887    libitext-java
888            - bouncycastle 2.1.4-1 (embed)
889    
890    python-ply
891            - pyke <unfixed> (embed; bug #555363)
892            - pywbem <unfixed> (embed; bug #555364)
893            - sepolgen <unfixed> (embed; bug #555365)
894            - zope-textindexng3 <unknown> (embed)
895            - iceweasel <unknown> (embed)
896            - xulrunner <unknown> (embed)
897            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
898    
899    libdumbnet (libdnet upstream)
900            - nmap <unfixed> (fork)
901    
902    gcc-4.4
903            - gcc-mingw32 <unfixed> (embed)
904    
905    camlimages
906            - advi <unfixed> (static; bug #550441)
907    
908    memcached
909            - memcachedb <unfixed> (embed)
910    
911    yajl
912            - argyll <unfixed> (embed; bug #544223)
913            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
914    
915    libept
916            - adept <unfixed> (embed; bug #540649)
917    
918    libvorbis
919            - iceweasel <not-affected> (uses xulrunner)
920            - xulrunner <unfixed> (embed; bug #540959)
921            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
922            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
923    
924    cairo
925            - iceweasel <not-affected> (uses xulrunner)
926            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
927    
928    liboggz
929            - iceweasel <not-affected> (uses xulrunner)
930            - xulrunner <unfixed> (embed; bug #540949)
931            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
932            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
933    
934    
935    liboggplay
936            - iceweasel <not-affected> (uses xulrunner)
937            - xulrunner <unfixed> (embed; bug #540949)
938            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
939            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
940    
941    php-net-dnsbl
942            - serendipity <unfixed> (embed)
943    
944    php-onyx-rss
945            - serendipity <unfixed> (embed)
946    
947    php-text-wiki
948            - serendipity <unfixed> (embed)
949    
950    php-xml-rpc
951            - serendipity <unfixed> (embed)
952    
953    polarssl (does not have a shared library)
954            - pdkim <itp> (embed; bug #543150)
955            - xyssl <unfixed> (old-version)
956    
957    pidgin
958            - gaim <removed> (old-version)
959    
960    icu
961            - webkit 1.0.1-1 (embed; bug #547214)
962            - texlive-bin <unfixed> (fork)
963            NOTE: texlive upstream working with icu upstream to merge their changes
964    
965    cyrus-imapd-2.2
966            - kolab-cyrus-imapd <unfixed> (fork)
967            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
968    
969    python-cxx-dev
970            - freecad <unfixed> (embed; bug #547936)
971    
972    libzipios++-dev
973            - freecad <unfixed> (embed; bug #547941)
974    
975    linux-2.6
976            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
977            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
978            - kernel-source-2.6.8 <removed> (old-version)
979            - kernel-source-2.4.27 <removed> (old-version)
980            - kernel-source-2.4.24 <removed> (old-version)
981            - kernel-source-2.2.25 <removed> (old-version)
982            - kernel-source-2.2.20 <removed> (old-version)
983    
984    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
985            - kvm <unfixed> (embed) [./libfdt/*]
986    
987    qweb (not packaged)
988            - ajaxterm <unfixed>
989    
990    opensaml2
991            - opensaml <removed> (old-version)
992    
993    shibboleth-sp2
994            - shibboleth-sp <removed> (old-version)
995    
996    tuxonice-userui
997            - suspend2-userui <removed> (old-version)
998    
999    expat
1000            - w3c-libwww <removed> (embed; bug #551941)
1001            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1002            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1003            - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1004            - python2.4 <unfixed> (embed; bug #553403)
1005            - wxwindows2.4 <removed> (embed)
1006            - wxwidgets2.6 <unfixed> (embed)
1007            - wxwidgets2.8 <unfixed> (embed)
1008            - celementtree <unfixed> (embed)
1009            - audacity <unfixed> (embed)
1010            - matanza <unfixed> (embed)
1011            - tdom <unfixed> (embed)
1012            - udunits <unfixed> (embed)
1013            - apr-util 1.2 (embed)
1014            - ayttm <unfixed> (embed)
1015            - cableswig <unfixed> (embed)
1016            - cadaver <unfixed> (embed)
1017            - cmake <unfixed> (embed)
1018            - coin3 <unfixed> (embed)
1019            - gdcm <unfixed> (embed)
1020            - ghostscript <unfixed> (embed)
1021            - grmonitor <unfixed> (embed)
1022            - iceape <unfixed> (embed)
1023            - insighttoolkit <unfixed> (embed)
1024            - libparagui1.1 <unfixed> (embed)
1025            - paraview <unfixed> (embed)
1026            - poco <unfixed> (embed)
1027            - simgear <unfixed> (embed)
1028            - sitecopy <unfixed> (embed)
1029            - smart 1.0-1 (embed)
1030            [etch] - smart <unfixed> (embed)
1031            - swish-e <unfixed> (embed)
1032            - tla <unfixed> (embed)
1033            - vtk <unfixed> (embed)
1034            - wbxml2 <unfixed> (embed)
1035            - xmlrpc-c <unfixed> (embed)
1036            - iceweasel <unfixed> (embed)
1037            - kompozer <unfixed> (embed)
1038            - vxl <unfixed> (embed)
1039            - xulrunner <unfixed> (embed)
1040            - apache2 2.2 (embed)
1041            - texlive-bin <unfixed> (embed) [included twice]
1042            - vnc4 <unfixed> (embed)
1043            - xotcl <unfixed> (embed)
1044    
1045    xerces-c
1046            - xerces-c2 <unfixed> (old-version)
1047            - xerces27 <removed> (old-version)
1048    
1049    md5 (RSA's version; not the gnu version provided by coreutils)
1050            - w3c-libwww <removed> (embed; bug #551942)
1051            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1052    
1053    enet
1054            - sauerbraten <unfixed> (embed; #497194)
1055    
1056    eglibc
1057            - glibc <removed> (old-version)
1058    
1059    galib
1060            - gamera 3.2.3-1 (embed)
1061    
1062    configobj
1063            - bzr <unfixed> (embed; bug #555336)
1064            - elisa <unfixed> (embed; bug #555337)
1065            - gaupol <unfixed> (embed; bug #555338)
1066            - ipython <unfixed> (embed; bug #555339)
1067            - pida <unfixed> (embed; bug #555340)
1068            - psychopy <unfixed> (embed; bug #555341)
1069            - rest2web <unfixed> (embed; bug #555342)
1070            - auth2db <unknown> (embed)
1071            - dynagen <unknown> (embed)
1072            - iceweasel <unknown> (embed)
1073            - sabnzbdplus <unknown> (embed)
1074            - xulrunner <unknown> (embed)
1075            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1076    
1077    python-clientform
1078            - bibus <unfixed> (embed; bug #555332)
1079            - zope2.10 <unfixed> (embed; bug #555333)
1080            - zope2.11 <unfixed> (embed; bug #555334)
1081            - python-mechanize <unknown> (embed)
1082            - twill <unknown> (embed)
1083    
1084    python-mechanize
1085            - zope2.10 <unfixed> (embed; bug #555337)
1086            - zope2.11 <unfixed> (embed; bug #555338)
1087            - twill <unknown> (embed; bug #555339)
1088    
1089    pexpect
1090            - duplicity <unfixed> (embed; bug #555361)
1091            - hplip <unfixed> (embed; bug #555362)
1092            - smart <unfixed> (embed; bug #555363)
1093    
1094    pyparsing
1095            - bauble <unfixed> (embed; bug #555366)
1096            - boa-constructor <unfixed> (embed; bug #555367)
1097            - calibre <unfixed> (embed; bug #555368)
1098            - matplotlib <unfixed> (embed; bug #531024)
1099            - zhpy <unfixed> (embed; bug #555370)
1100            - polybori <unknown> (embed)
1101            - python-whoosh <unknown> (embed)
1102            - twill <unknown> (embed)
1103            - zope-textindexng3 <unknown> (embed)
1104    
1105    python-pysqlite2
1106            - python2.4 <unfixed> (embed; bug #553403)
1107            - python2.5 <unfixed> (embed; bug #553403)
1108    
1109    celementtree
1110            - python2.5 <unfixed> (embed)
1111            - smart 1.0-1 (embed)
1112            [etch] - smart <unfixed> (embed)
1113    
1114    elementtree
1115            - python2.5 <unfixed> (embed)
1116            - bzr <unfixed> (embed; bug #555343)
1117            - gedit <unfixed> (embed; bug #555344)
1118            - smart 1.0-1 (embed)
1119            [etch] - smart <unfixed> (embed)
1120            - solfege <unfixed> (embed; bug #555345)
1121            - w3af <unfixed> (embed; bug #555346)
1122            - python-qt4 <unknown> (embed)
1123            - sphinx <unknown> (embed)
1124            - python-nltk <itp> (embed)
1125    
1126    python2.5
1127            - python2.4 <unfixed> (old-version)
1128            - jython <unfixed> (embed)
1129            NOTE: embeds many stdlib modules
1130            - python-django <unfixed> (embed)
1131            NOTE: embeds stdlib modules: doctest, decimal
1132            - gamera 3.2.3-1 (embed)
1133            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1134            - boa-constructor <unfixed> (embed)
1135            NOTE: embeds stdlib modules: ConfigParser
1136            - nicotine <unfixed> (embed)
1137            NOTE: embeds stdlib modules: ConfigParser
1138            - museek+ <unfixed> (embed)
1139            NOTE: embeds stdlib modules: ConfigParser
1140            - vegastrike-data <unfixed> (embed)
1141            NOTE: embeds many stdlib modules
1142            - codespeak-lib <unfixed> (embed)
1143            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1144            - config-manager <unfixed> (embed)
1145            NOTE: embeds stdlib modules: optparse
1146            - jhbuild <unfixed> (embed)
1147            NOTE: embeds stdlib modules: optparse, subprocess
1148            - smart <unfixed> (embed)
1149            NOTE: embeds stdlib modules: optparse
1150            - pyprotocols <unfixed> (embed)
1151            NOTE: embeds stdlib modules: doctest
1152            - ruledispatch <unfixed> (embed)
1153            NOTE: embeds stdlib modules: doctest
1154            - distribute <unfixed> (embed)
1155            NOTE: embeds stdlib modules: doctest
1156            - python-setuptools <unfixed> (embed)
1157            NOTE: embeds stdlib modules: doctest
1158            - zope.testing <unfixed> (embed)
1159            NOTE: embeds stdlib modules: doctest
1160            - translate-toolkit <unfixed> (embed)
1161            NOTE: embeds stdlib modules: textwrap, contextlib
1162            - libtpclient-py <unfixed> (embed)
1163            NOTE: embeds stdlib modules: subprocess
1164            - grass <unfixed> (embed)
1165            NOTE: embeds stdlib modules: subprocess
1166            - coherence <unfixed> (embed)
1167            NOTE: embeds stdlib modules: uuid
1168            - python-django-extensions <unfixed> (embed)
1169            NOTE: embeds stdlib modules: uuid
1170            - setroubleshoot <unfixed> (embed)
1171            NOTE: embeds stdlib modules: uuid
1172            - linkchecker <unfixed> (embed)
1173            NOTE: embeds msgfmt.py script
1174            - imdbpy <unfixed> (embed)
1175            NOTE: embeds msgfmt.py script
1176            - kiwi <unfixed> (embed)
1177            NOTE: embeds msgfmt.py script
1178            - moin <unfixed> (embed)
1179            NOTE: embeds msgfmt.py script
1180            - plone3 <unfixed> (embed)
1181            NOTE: embeds msgfmt.py script
1182            - roundup <unfixed> (embed)
1183            NOTE: embeds msgfmt.py script
1184            - rednotebook <unfixed> (embed)
1185            NOTE: embeds msgfmt.py script
1186            - turbogears <unfixed> (embed)
1187            NOTE: embeds msgfmt.py script
1188            - elisa <unfixed> (embed)
1189            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1190            - calibre <unfixed> (embed)
1191            NOTE: embeds msgfmt.py script
1192            - mailman <unfixed> (embed)
1193            NOTE: embeds msgfmt.py script
1194            - python-docutils <unknown> (embed)
1195            NOTE: embeds stdlib modules: optparse, textwrap
1196            - python-imaging <unknown> (embed)
1197            NOTE: embeds stdlib modules: doctest
1198            - python-mechanize <unknown> (embed)
1199            NOTE: embeds stdlib modules: doctest
1200            - twill <unknown> (embed)
1201            NOTE: embeds stdlib modules: subprocess
1202            - zeroc-ice <unknown> (embed)
1203            NOTE: embeds stdlib modules: subprocess
1204            - wxwidgets2.8 <unknown> (embed)
1205            NOTE: embeds stdlib modules: subprocess
1206            - cycle <unknown> (embed)
1207            NOTE: embeds msgfmt.py script
1208            - deluge <unknown> (embed)
1209            NOTE: embeds msgfmt.py script
1210            - opendict <unknown> (embed)
1211            NOTE: embeds msgfmt.py script
1212            - openerp-client <unknown> (embed)
1213            NOTE: embeds msgfmt.py script
1214            - rapidsvn <unknown> (embed)
1215            NOTE: embeds msgfmt.py script
1216            - wammu <unknown> (embed)
1217            NOTE: embeds msgfmt.py script
1218            - gaphor <unknown> (embed)
1219            NOTE: embeds msgfmt.py script
1220            - pida <unknown> (embed)
1221            NOTE: embeds msgfmt.py script
1222            - python-formencode <unknown> (embed)
1223            NOTE: embeds msgfmt.py script
1224    
1225    argparse
1226            - twill <unfixed> (embed; bug #555347)
1227            - ipython <unfixed> (embed; bug #555348)
1228    
1229    coherence
1230            - elisa <unfixed> (embed; bug #555335)
1231    
1232    simpletal
1233            - plastex <unfixed> (embed; bug #555371)
1234    
1235    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1236            - postr <unfixed> (embed)
1237            - elisa <unfixed> (embed)
1238    
1239    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1240            - apertium-tolk <unfixed> (embed)
1241            - ipython <unfixed> (embed)
1242            - virtaal <unfixed> (embed)
1243    
1244    distribute
1245            - setuptools <removed> (old-version)
1246    
1247    rails
1248            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1249            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1250            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1251            - thin <unfixed> (embed) [./spec/rails_app/*]
1252            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1253            NOTE: be dangerous if developers are naively basing their code off of the examples
1254            NOTE: prototype.js is among the example files
1255    
1256    lucene2 (prototype.js is among the embeds in the following)
1257            - lucene <unfixed> (old-version)
1258            - pylucene <unfixed> (embed)
1259            - libpdfbox-java <unfixed> (embed)
1260            - libfontbox-java <unfixed> (embed)
1261            - libjempbox-java <unfixed> (embed)
1262            - solr <unfixed> (embed)
1263    
1264    unicode-data
1265            - syslinux <unfixed> (embed)
1266            - camomile <unfixed> (embed)
1267            - fribidi <unfixed> (embed)
1268            - m17n-db <unfixed> (embed)
1269            - sbcl <unfixed> (embed)
1270            - heimdal <unfixed> (embed)
1271            - icu <unfixed> (embed)
1272            - icu4j <unfixed> (embed)
1273            - krb5 <unfixed> (embed)
1274            - moodle <unfixed> (embed)
1275            - openldap <unfixed> (embed)
1276            - pike7.6 <unfixed> (embed)
1277            - samba <unfixed> (embed)
1278            - samba4 <unfixed> (embed)
1279            - cmucl <unfixed> (embed)
1280            - typo3-src <unfixed> (embed)
1281            - mauve <unfixed> (embed)
1282            - texlive-bin <unfixed> (embed)
1283            - ypsilon <unfixed> (embed)
1284            - jeuclid <unfixed> (embed)
1285            - charmap.app <unfixed> (embed)
1286            - clisp <unfixed> (embed)
1287            - gnulib <unfixed> (embed)
1288            - opensrs-client <unfixed> (embed)
1289            - saxonb <unfixed> (embed)
1290            - rails <unfixed> (embed)
1291    
1292    feedparser
1293            - rawdog <unfixed> (embed; bug #383422)
1294            - miro <unfixed> (embed; bug #555352)
1295            - calibre <unfixed> (embed; bug #555352)
1296            - freevo <unfixed> (embed; bug #555353)
1297            - pida <unfixed> (embed; bug #555354)
1298            - planet-venus <unfixed> (embed; bug #555355)
1299            - plone3 <unfixed> (embed; bug #555356)
1300            - exaile <unknown> (embed)
1301            - screenlets <unknown> (embed)
1302            NOTE: included twice
1303    
1304    agg:
1305            - matplotlib <unfixed> (embed: bug #377271)
1306            - contextfree <unfixed> (embed)
1307            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1308            - exactimage <unfixed> (embed)
1309            - python-enable <unfixed> (embed)
1310            - mapnik 0.5.1-3 (embed)
1311            NOTE: links statically to agg, but shared library is not available (bug #377271)
1312    
1313    vtk
1314            - paraview <unfixable> (embed; bug #495426)
1315    
1316    txt2tags
1317            - rednotebook <unfixed> (embed)
1318    
1319    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1320            - gajim <unfixed> (embed)
1321            - emesene <unfixed> (embed)
1322            - convirt <unfixed> (embed)
1323            - pida <unfixed> (embed)
1324            - rednotebook <unfixed> (embed)
1325    
1326    horde3 (prototype.js is among the embeds in the following)
1327            - mnemo2 <unfixed> (embed)
1328            - nag2 <unfixed> (embed)
1329    
1330  libmpeg2:  cimg
1331  mpeg2dec          - gmic <itp> (embed)
 xine-lib  
1332    
1333  curl:  mootools
1334  wget (code for NTLM authentication)          - gmic <itp> (embed)

Legend:
Removed from v.3064  
changed lines
  Added in v.13248

  ViewVC Help
Powered by ViewVC 1.1.5