/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3064 by jmm-guest, Thu Dec 15 23:01:23 2005 UTC revision 13287 by gilbert-guest, Sun Nov 15 06:48:14 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml  to be applied in multiple source packages.
7  kdegraphics/kpdf  
8  tetex-bin (the very latest tetex-bin started to use poppler)  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor  
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embedding a copy of the library into another source package)
19          fork (the package is not just embedding code but it is a fork and
20                thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24    The srcpkg might be some string to identify the code if there is no
25    specific source package.
26    
27    Everything up to the next line is ignored.
28    ---BEGIN
29    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30            NOTE: Fixed packages link to poppler library unless otherwise noted
31            - pdftohtml <unknown>
32            [sarge] - pdftohtml <unfixed>
33            [etch] - pdftohtml <unfixed>
34            NOTE: has been replaced by poppler-utils
35            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36            - texlive-base 3.0-12 (embed)
37            - texlive-bin 2007-1 (embed)
38            NOTE: links to poppler
39            - koffice <unfixed> (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50    ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59    
60    peercast
61            - gnome-peercast <removed> (embed)
62            [etch] - gnome-peercast <unfixed> (embed)
63    
64    silc-toolkit
65            - silc-client 1.1~beta6-1 (embed)
66    
67    icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71    dietlibc
72            - ccontrol 0.9.1+20071204-1 (static)
73    
74    libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78    libiax
79            - iaxmodem <unfixable> (embed; bug #548885)
80    
81    spandsp
82            - iaxmodem <unfixable> (embed; bug #548885)
83    
84    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85            - dpkg <unfixed> (embed)
86            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87            - rsync <unfixed> (embed)
88            NOTE: somehow derived code base
89            - mono <unfixed> (embed)
90            TODO: check mozilla
91            - Linux kernels <unfixed> (embed)
92            - pvpgn 1.7.8-2 (embed)
93            - mrtg 2.12.2-1 (embed)
94            - rpm <unknown> (embed)
95            NOTE: pinged anibal since when rpm was fixed
96            - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98            - tra <unfixed>
99            - sash <unfixed>
100            - nsis <unfixed>
101            - mseide-msegui <unfixed>
102            NOTE: mseide
103            - mirrordir <unfixed>
104            - poco <unfixed>
105            - klibc <unfixed>
106            - ghostscript <unfixed>
107            - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112            - perl <unfixed>
113            - paraview <unfixed>
114            - gcvs <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125            - gamera 3.2.3-1 (embed)
126            - python2.4 <unfixed> (embed; bug #553403)
127            - python2.5 <unfixed> (embed; bug #553403)
128    
129    dulwich
130            - hg-git 0.1.0-1 (embed; bug #541996)
131    
132    libvigraimpex
133            - hugin <unfixed> (embed; bug #542259)
134            - enblend-enfuse <unfixed> (embed; bug #542258)
135            - gamera 3.2.3-1 (embed)
136    
137    libbz2
138            - dpkg <unfixed> (static)
139    
140    libgadu
141            - centericq <unfixed> (embed)
142            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144            - kdenetwork 4:3.3.2-5 (embed)
145            NOTE: from kdenetwork: kopete
146            - ekg 1:1.8~rc0-1 (embed)
147            - kadu 0.6.0.2-3 (embed; bug #504430)
148            - gadu <itp> (embed)
149    
150    xmlrpc (which package is the "origin" of this code?)
151            - drupal <unfixed> (embed)
152            - phpgroupware <unfixed> (embed)
153            - egroupware <unfixed> (embed)
154            - phpwiki <unfixed> (embed)
155            - php4 <unfixed> (embed)
156            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157    
158    shtool (affects build-time only)
159            - mysql-ocaml <unfixed> (embed)
160            - php4 <unfixed> (embed)
161    
162    iceape
163            - iceweasel <unfixed> (fork)
164            - icedove <unfixed> (fork)
165            - xulrunner <unfixed> (fork)
166            - kompozer <unfixed> (embed; bug #532168)
167            - galeon <unfixed> (fork)
168            - epiphany-browser <unfixed> (fork)
169            - conkeror <unfixed> (fork)
170            - kazehakase <unfixed> (fork)
171    
172    xli
173            - xloadimage <unfixed> (embed)
174    
175    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
176            - openmotif <unfixed> (embed)
177            - libxpm <unfixed> (embed)
178    
179    kerberized apps with BSD origin
180            - krb4 <removed> (embed)
181            - krb5 <unfixed> (embed)
182            - heimdal <unfixed> (embed)
183    
184    grip (which pkg is the origin?)
185            - libcdaudio <unfixed>
186            - grip <unfixed>
187            - gnome-vfs <unfixed>
188            TODO: check vfs2 as well
189    
190    fudforum
191            [etch] - phpgroupware <unfixed> (embed)
192            NOTE: phpgroupware-fudforum
193            [sarge] - egroupware-fudforum <removed> (embed)
194    
195    libbsd
196            - rdate 1:1.2-3 (embed)
197            - atheme-services <unfixed>
198            - libbsd-arc4random-perl <unfixed>
199            - isakmpd <unfixed>
200    
201    cvs
202            - gcvs <unfixed> (embed)
203            NOTE: see cvsunix/src in tarball
204    
205    pcre3
206            - php4 <unknown> (embed)
207            - analog 2:5.23-0woody1 (embed)
208            - goffice <unfixed> (embed)
209            NOTE: libgoffice-*
210            - vfu 4.06-4.1 (embed; bug #450754)
211            - tf5 5.0beta7-1 (embed)
212            - monotone 0.43-1 (embed)
213            NOTE: this only affects versions >= 0.37
214            - glib2.0 2.15.2-1 (embed)
215            - apache2 2.0.53-4 (embed)
216            - exim4 4.10-0.srh20.12 (embed)
217            - yacas <unfixed> (embed)
218            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
219            - gtamsanalyzer.app 0.42-5 (embed)
220            - tin 980117-1 (embed)
221            - kazehakase 0.5.2-1
222            - webkit 1.0.1-1 (embed)
223            - qt4-x11 <unfixed> (embed)
224            NOTE: embedded via webkit copy
225            - erlang <unfixed> (embed)
226    
227    tiff
228            - wxwindows2.4 2.2.1 (embed)
229            - gamera 3.2.3-1 (embed)
230    
231    uudeview
232            - libconvert-uulib-perl <unfixed> (embed)
233            - pan <unfixed> (embed)
234    
235    sqlite (not affected by security vulnerabilities so far)
236            - amarok <unfixed> (embed)
237            - monotone 0.43-1 (embed)
238            - iceweasel <unfixed> (embed)
239    
240    util-linux/mount
241            - loop-aes-utils <unfixed> (embed)
242            NOTE: contains code from util-linux' mount in the mount-aes-udeb
243    
244    sylpheed
245            - sylpheed-claws <unfixed> (fork)
246    
247    phpsysinfo
248            - egroupware <unfixed> (embed)
249            - phpgroupware <unfixed> (embed)
250    
251    phpldapadmin
252            [sarge] - egroupware <unfixed> (embed)
253            NOTE: removed from egroupware after sarge
254    
255    chmlib
256            - kchmviewer <unknown> (embed)
257    
258    ffmpeg (libavcodec/libavformat)
259            - mplayer 1.0~rc2-14 (embed; bug #395252)
260            - kino 1.0.0-1
261            - vlc <not-affected> (Links dynamically since initial release)
262            - smilutils 0.3.0-10
263            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
264            - motion 3.1.19-1
265            - gstreamer0.10-ffmpeg 0.10.3-2
266            - xmovie <removed> (static)
267            TODO: gimp-gap (potentially using ffmpeg code as well)
268            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
269    
270    faad2
271            - mplayer 1.0~rc2-20 (embed)
272            - avifile <unfixed> (embed; bug #538750)
273            - ffmpeg-debian <removed> (old-version)
274    
275    libmad (MPEG decoding lib)
276            - xine-lib <unfixed> (embed)
277            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
278            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
279    
280    libdts
281            - xine-lib <unfixed> (embed)
282    
283  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  flac
284  dpkg          - xine-lib <unfixed> (embed)
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
   
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
285    
286  libavcodec/libavformat:  liba52
287  ffmpeg          - a52dec <unfixed> (embed)
288  xine-lib          - xine-lib <unfixed> (embed)
289  xvidcap (currently in NEW)  
290  kino(?)  libmpeg2
291  gst-ffmpeg          - mpeg2dec <unfixed> (embed)
292  xmovie (currently in NEW)          - xine-lib <unfixed> (embed)
293  gst-ffmpeg  
294    libntlm
295            - wget <unfixed> (fork; bug #550436)
296            - curl <unfixed> (fork; bug #550437)
297            - cntlm <unfixed> (fork; bug #550438)
298    
299    uw-imap
300            - pine <unfixed> (embed)
301            - alpine <unfixed> (embed)
302    
303    imagemagick
304            - graphicsmagick <unfixed> (fork)
305    
306    python-urlgrabber
307            - mercurial <unfixed> (embed; bug #531062)
308            - w3af <unfixed> (embed; bug #555372)
309            [experimental] - harvestman <unfixed> (embed; bug #555373)
310    
311    beautifulsoup
312            - python-mechanize <unfixed> (embed; bug #555349)
313            - zope2.11 <unfixed> (embed; bug #555350)
314            - twill <unknown> (embed)
315    
316    halibut
317            - nsis <unfixed> (fork)
318    
319    libghttp
320            - hotway <unfixed> (embed)
321    
322    libsndfile
323            - ardour 1:2.7.1-1 (embed)
324    
325    glibmm2.4
326            - ardour 1:2.7.1-1 (embed)
327    
328    libgnomecanvasmm2.6
329            - ardour 1:2.7.1-1 (embed)
330    
331    libsigc++-2.0
332            - ardour 1:2.7.1-1 (embed)
333    
334    soundtouch
335            - ardour 1:2.7.1-1 (embed)
336    
337    libmms
338            - xine-lib <unfixed> (embed)
339            - mimms <unfixed> (embed)
340    
341    fckeditor
342            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
343            - moin 1.8.2-2 (embed; bug #452599)
344            - karrigell <removed> (embed; bug #452598)
345            - gforge 4.6.99+svn6225-1 (embed)
346            - request-tracker3.8 <unfixed> (embed)
347    
348    ipatlas (not packaged in Debian)
349            - moodle <unfixed> (embed; bug #507185)
350    
351    libphp-phpmailer
352            - moodle <unfixed> (embed; bug #507185)
353            - mahara <unfixed> (embed)
354            - symfony <unfixed> (embed)
355            [etch] - phpgroupware <unfixed> (embed)
356            NOTE: phpgroupware-felamimail is only in etch
357            - egroupware <unfixed> (embed; bug #504283)
358            - glpi <unfixed>
359    
360    htmlArea (not packaged in Debian)
361            - moodle <unfixed> (embed)
362    
363    giflib
364            - wine <unfixed> (embed; bug #466181)
365    
366    bennu (not packaged in Debian, http://bennu.sourceforge.net)
367            - moodle <unfixed> (embed)
368    
369    smarty
370            - moodle 1.8.2-2 (embed; bug #471158)
371            - gallery2 2.2.5-2 (embed; bug #471160)
372            - mahara 0.9.2-2 (embed; bug #471201)
373            - gosa 2.4beta1-1 (embed; bug #471200)
374    
375    TinyMCE
376            - wordpress 2.5.1-3 (embed; bug #478257)
377            - moodle <unfixed> (embed; bug #507185)
378            - knowledgeroot <unfixed> (embed)
379            - joomla <itp> (bug #326398)
380    
381    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
382            - scite <unfixed> (embed)
383            - qscintilla <unfixed> (embed)
384            - qscintilla2 <unfixed> (embed)
385            - geany <unfixed> (fork)
386            - anjuta <unfixed> (embed)
387    
388    libphp-adodb
389            - moodle <unfixed> (embed; bug #507185)
390            NOTE: also AdoDB-XML Schema
391            - gallery2 <unfixed> (embed)
392            - phppgadmin <unfixed> (embed)
393            - egroupware <unfixed> (embed)
394            - phpwiki <unfixed> (embed)
395            - torrentflux 2.0beta1-2 (embed)
396            - ipplan <unfixed> (embed)
397            - typo3-src <unfixed> (embed)
398            - cacti <unknown> (embed)
399            [sarge] - cacti <unfixed> (embed)
400            NOTE: dependency exists, but internal version is used
401            - gforge 4.7~rc2-6 (embed)
402            - mahara <unfixed> (embed)
403    
404    gzip
405            - linux-kernel <unfixed> (embed)
406            NOTE: lib/inflate.c
407            - klibc <unfixed> (embed)
408            NOTE: based on linux-kernel gzip code
409            - busybox <unfixed> (embed)
410    
411    neon
412            - cadaver 0.22.3+debian-1 (embed; bug #188381)
413            - gnome-vfs2 <unfixed> (embed; bug #395874)
414            [etch] - litmus <unfixed> (embed; #395875)
415            - litmus <removed> (embed; #395875)
416            [sarge] - screem <unfixed> (embed)
417            - sitecopy 1:0.16.3-5 (embed; bug #395876)
418            [etch] - tla <unfixed> (embed; bug #395877)
419            [sarge] - tla <unfixed> (embed; bug #395877)
420    
421    libmodplug
422            - gst-plugins-bad0.10 <unfixed> (embed)
423    
424    libvncserver
425            - vino <unfixed> (embed)
426    
427    putty
428            - filezilla <unfixed> (embed)
429    
430    tinyxml (not packaged in Debian)
431            - filezilla <unfixed>
432    
433    gv
434            - evince <unfixed> (embed)
435            NOTE: ps/ tree from gv 3.5.8
436            NOTE: evince-gtk is affected (a component of evince source package)
437    
438    libXbae
439            - paw <removed> (embed)
440            [etch] - paw <unfixed> (embed)
441    
442    libgtkhtml
443            - claws-mail-extra-plugins <unfixed> (fork)
444    
445    libXaw
446            - paw <removed> (embed)
447            [etch] - paw <unfixed> (embed)
448            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
449    
450    libgd2
451            - graphviz <unfixed> (embed)
452            NOTE: lib/gd seems to be 2.0.33
453            - wml <unfixed> (embed)
454            - libwmf <unfixed> (embed)
455            NOTE: derived from gd 1.6.3
456    
457    rar
458            - unrar-nonfree <unfixed> (embed)
459    
460    unrar-free (maybe this code is derived from the original rar, too?)
461            - clamav <unfixed> (embed)
462            NOTE: seems to be disabled in default config
463    
464    mplayer (DirectMedia Object loader)
465            - xine-lib <unfixed> (embed)
466            NOTE: src/libw32dll/
467            - vlc <unfixed> (embed)
468            NOTE: modules/codec/dmo/
469            - mplayer 1.0~rc2-20 (embed)
470    
471    libwpd (WordPerfect converter)
472            - openoffice.org <unfixed> (embed)
473    
474    fsplib (http://sourceforge.net/projects/fsp/)
475            - gftp <unfixed> (embed)
476            NOTE: lib/fsplib version 0.3
477    
478    sprng
479            - tree-puzzle <unfixed> (embed)
480    
481    librpcsecgss
482            - krb5 <unfixed> (embed)
483    
484    jasper
485            - ghostscript <unfixed> (embed)
486            - gs-gpl <unfixed> (embed)
487    
488    libiris
489            - psi <unfixed> (embed)
490            - kdenetwork <unfixed> (embed)
491            NOTE: kopete embeds libiris but links dynamically to libidn
492            - kdegames <unfixed> (embed)
493            NOTE: ksirk/kde4
494    
495    libidn
496            - monotone 0.43-1 (embed)
497            - psi <unfixed> (embed)
498            NOTE: psi embeds libiris which embeds libidn
499            - kdegames <unfixed> (embed)
500            NOTE: kdegames/kde4 embeds libiris which embeds libidn
501    
502    liblua
503            - monotone 0.43-1 (embed)
504            - nmap 5.00-1 (embed; bug #527997)
505            [lenny] - nmap <unfixed> (embed; bug #527997)
506    
507    libbotan
508            - monotone 0.43-1 (embed)
509    
510    NetXX
511            - monotone 0.43-1 (embed)
512    
513    libgc
514            - mono <unfixed> (embed)
515    
516    lzma
517            - p7zip <unfixed> (embed)
518            - xz-utils <unfixed> (fork)
519    
520    lzo
521            - grub2 <unfixed> (embed)
522    
523    yassl
524            - mysql-dfsg-5.0 <unfixed> (embed)
525    
526    pax code
527            - tar <unfixed> (embed)
528            - cpio <unfixed> (embed)
529    
530    t1lib
531            - tetex-bin 2.0.2-1 (embed)
532            - texlive-bin <unknown> (embed)
533    
534    guichan
535            - boswars <unfixed> (embed)
536            NOTE: maintainer notified us, working on it
537    
538    tolua
539            - boswars <unfixed> (embed)
540            NOTE: maintainer notified us, working on it
541    
542  mad MPEG decoding lib:  asio-dev
543  mad          - luxrender <removed> (embed)
 xine-lib  
544    
 libdts:  
 libdts  
545  xine-lib  xine-lib
546            - vlc <unfixed> (embed)
547            NOTE: only parts included in modules/access/rtsp
548    
549  flac:  netpbm
550  flac          - tcl8.3 <unfixed> (embed)
551  xine-lib          - tcl8.4 <unfixed> (embed)
552            - tcl8.5 <unfixed> (embed)
553            NOTE: generic/tkImgGIF.c
554    
555    tk8.5
556            - tk8.0 <removed> (old-version)
557            - tk8.3 <unfixed> (old-version)
558            - tk8.4 <unfixed> (old-version)
559            - perl-tk <unfixable> (fork)
560    
561    samba
562            - mc 2:4.6.2~git20080311-1 (embed)
563            NOTE: maintainer is aware of this, currently searching a solution
564    
565    plib1.8.4c2
566            - boson <unfixed> (fork)
567            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
568    
569    fribidi
570            - quesoglc <unfixed> (embed)
571            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
572    
573    glew
574            - quesoglc <unfixed> (embed; bug #489341)
575            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
576    
577    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
578            - transcend <unfixed> (embed)
579            - cultivation <unfixed> (embed)
580            - passage <unfixed> (embed)
581            - gravitation <unfixed> (embed)
582    
583    tar
584            - libarchive <unfixed> (embed)
585            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
586    
587    cpio
588            - libarchive <unfixed> (embed)
589            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
590    
591    webkit
592            - qt4-x11 <unfixed> (embed)
593    
594    ftgl
595            - blender 2.46+dfsg-1 (embed)
596    
597    wv
598            - abiword <unfixed>
599    
600    qemu
601            - kvm <unfixed> (embed; bug #543159)
602            - xen-3 <unfixed> (embed)
603            - xen-unstable <unfixed> (embed)
604    
605    vgabios
606            - kvm <unfixed> (embed; bug #489442)
607    
608    bochs
609            - kvm <unfixed> (embed; bug #489442)
610    
611    speex
612            - vorbis-tools <unfixed> (embed)
613            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
614            - gst-plugins-good0.10 <unfixed> (embed)
615            - xine-lib <unfixed> (embed)
616            - libfishsound <unfixed> (embed)
617            - libannodex <unfixed> (embed)
618            - vlc <unfixed> (embed)
619            - xmms-speex <unfixed> (embed)
620            - libsdl-sound1.2 <unfixed> (embed)
621            - sweep <unfixed> (embed)
622    
623    libreadline
624            - magic <itp> (old-version)
625    
626    opcode
627            - ode <unfixed> (embed)
628            NOTE: opcode is not a package in debian, it is just embedded
629            NOTE: http://www.codercorner.com/Opcode.htm
630    
631    gimpact
632            - ode <unfixed> (embed)
633            NOTE: gimpact is not a package in debian, it is just embedded
634            NOTE: http://gimpact.sf.net
635    
636    mochikit
637            - mahara <unfixed> (embed)
638            NOTE: they require extra patches, still unmerged upstream
639            - ntop <unfixed> (embed)
640            - coherence 0.6.2-1 (embed)
641            - paste <unfixed> (embed)
642            - turbogears <unfixed> (embed)
643            - plone3 <unfixed> (embed)
644            - xulrunner <unfixed> (embed)
645            - libjifty-plugin-chart-perl <unfixed> (embed)
646            - sabnzbdplus <unfixed> (embed)
647            - tgmochikit <unfixed> (embed)
648    
649    prototypejs
650            - netbeans-ide 6.0.1+dfsg-2 (embed)
651            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
652            - webcit <unfixed> (embed; bug #555219)
653            - asterisk 1:1.6.2.0~rc3-1 (embed)
654            - libjson-ruby 1.1.4-1 (embed; bug #555224)
655            - lucene2 <unfixed> (embed; bug #555226)
656            - horde3 <unfixed> (embed)
657            - knowledgeroot <unfixed> (embed; bug #555230)
658            - mediatomb <unfixed> (embed; bug #555233)
659            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
660            - ebug-http <unfixed> (embed; bug #555236)
661            - phpgedview <removed> (embed)
662            - poker-network <unfixed> (embed; bug #555238)
663            - rails 2.1.0-6 (embed)
664            - wordpress 2.5.0-2 (embed; bug #555243)
665            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
666            TODO: search through all of the other zope packages
667            - ampache 3.4.1-2 (embed)
668            - exaile <unfixed> (embed; bug #555245)
669            - hobix <unfixed> (embed; bug #555247)
670            - zabbix 1.6.6-4 (embed; bug #555250)
671            - chora2 <unfixed> (embed; bug #555253)
672            - gollem <unfixed> (embed; bug # 555254)
673            - jscropperui 1.2.1-1 (embed; bug #555257)
674            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
675            - ingo1 <unfixed> (embed; bug #555261)
676            - kronolith2 <unfixed> (embed; bug #555262)
677            - activeldap <unfixed> (embed)
678            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
679            - mantis <unfixed> (embed; bug #555265)
680            - otrs2 2.3.4-6 (embed; bug #555267)
681            - webcalendar <unfixed> (embed; bug #555269)
682            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
683            - jifty 0.90519-1 (embed; bug #555271)
684            - jquery <unfixed> (embed; bug #555272)
685            - passenger 2.2.5debian1-1 (embed; bug #555273)
686            - plone3 <unfixed> (embed; bug #555275)
687            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
688            - xulrunner <unfixed> (embed)
689            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
690    
691    gdb
692            - insight <unfixed> (embed)
693    
694    e2fsprogs
695            - ldiskfsprogs <unfixable> (fork)
696    
697    quazip (not packaged in Debian)
698            - qcake <unfixed> (embed)
699            NOTE: starting with upstream version 0.6.4
700    
701    exo
702            - pcmanfm <unfixed> (embed; bug #499677)
703            NOTE: slightly modified source code
704    
705    java
706            - openjdk-6 <unfixed>
707            - sun-java5 <unfixed>
708            - sun-java6 <unfixed>
709    
710    libphp-snoopy
711            - ampache 3.4.1-2 (embed; bug #504169)
712            - mahara 1.0.5-2 (embed; bug #504170)
713            - pixelpost 1.7.1-5 (embed; bug #504171)
714            - mediamate 0.9.3.6-5 (embed; bug #504172)
715            - opendb <removed> (embed; bug #504173)
716            [etch] - opendb <unfixed> (embed; bug #504173)
717            - wordpress 2.5.1-9 (embed; bug #443948)
718            - moodle <unfixed> (embed; bug #507185)
719            [etch] - phpgroupware <unfixed> (embed)
720            NOTE: phpgroupware-felamimail
721            - magpierss 0.72-3 (embed; bug #431089)
722    
723    jquery
724            - zekr <unfixed> (embed)
725            - wordpress <unknown> (embed)
726            - yocto-reader <unfixed> (embed)
727            - textpattern <unfixed> (embed)
728            - genshi 0.5.1-1 (embed)
729            NOTE: compressed file under examples/ dir
730            - prewikka <unfixed> (embed)
731            - libramaze-ruby <unfixed> (embed)
732            - drupal5 <unfixed> (embed)
733            - b2evolution <unfixed> (embed)
734            - wesnoth <unfixed> (embed)
735    
736    tablesorter (jquery plugin, not packaged yet)
737            - wesnoth <unfixed> (embed)
738    
739    kses
740            - wordpress <unfixed> (embed; bug #504242)
741            NOTE: their copy has all methods renamed to wp_<foo>
742            NOTE: kses isn't in Debian, RFP: #504240
743            - moodle <unfixed> (embed; bug #507185)
744            - egroupware <unfixed> (embed)
745    
746    magpierss
747            - wordpress <unfixed> (embed; bug #504242)
748            - moodle <unfixed>
749    
750    php-gettext
751            - wordpress 2.8.4-1 (embed; bug #504242)
752    
753    libphp-ixr (name may change, it is the Incutio XML-RPC)
754            - wordpress <unfixed> (embed; bug #504242)
755            NOTE: libphp-ixr isn't in Debian, RFP: #504236
756            - dokuwiki <unfixed> (embed)
757            - textpattern <unfixed> (embed)
758    
759    libphp-cas
760            - glpi <unfixed> (embed)
761            - moodle <unfixed> (embed; bug #505984)
762    
763    scriptaculous (prototype.js is among the embeds in the following)
764            - glpi <unfixed> (embed)
765            - libaws <unfixed> (embed; bug #555222)
766            - op-panel <unfixed> (embed)
767            - symfony <unfixed> (embed)
768            NOTE: maintainer says there are extra incompatible changes required
769            - pixelpost <unfixed> (embed)
770            - webhelpers <unfixed> (embed)
771            - qwik <unfixed> (embed; bug #555241)
772            - smokeping <unfixed> (embed)
773            - turba2 <unfixed> (embed)
774            - typo3-src 4.2.3-1 (embed)
775            - request-tracker3.6 <unfixed> (embed)
776            - request-tracker3.8 <unfixed> (embed)
777            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
778            - wordpress 2.5.0-2 (embed)
779    
780    libmarkdown-php
781            - moodle <unfixed> (embed; bug #507185)
782            - pixelpost <unfixed> (embed)
783    
784    php-openid
785            - wordpress-openid <itp> (embed)
786    
787    geshi
788            - dokuwiki 0.0.20080505-3.1 (embed)
789            - pgfouine 1.0-1.1 (embed)
790            - websvn 2.1.0-1 (embed)
791    
792    webcalendar
793            - gforge 4.7~rc2-6 (embed; bug #504758)
794    
795    libical
796            - kdepim <unfixed> (fork)
797            - kdepimlibs <unfixed> (fork)
798            NOTE: fixed in KDE4 post 4.1.x series
799            - claws-mail-extra-plugins <unfixed> (fork)
800    
801    libltdl3
802            - kdelibs <unfixed> (embed)
803            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
804            - synfig <unfixed> (embed)
805    
806    harfbuzz
807            - qt4-x11 <unfixed> (embed)
808    
809    libzip
810            - php5 <unfixed> (fork)
811            - odt2txt <unfixed> (embed; bug #523808)
812    
813    json.php (not packaged; should be replaced with php's built-in functions)
814            - moodle <unfixed>
815            - yui <unfixed>
816            - gallery2 <unfixed>
817            - dokuwiki <unfixed>
818            - typo3-src <unfixed>
819    
820    php-fpdf
821            - tcpdf <itp> (fork)
822            - moodle <unfixed>
823            - phpwiki <unfixed>
824            - egroupware <unfixed>
825            - ldap-account-manager <unfixed> (fork)
826    
827    tcpdf (itp: #495985)
828            - moodle <unfixed>
829            - phpmyadmin <unfixed>
830    
831    typo3
832            - moodle <unfixed>
833    
834    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
835            - moodle <unfixed>
836            - gosa <unfixed>
837    
838    php-ole (itp: #487558)
839            - moodle <unfixed>
840    
841    pieforms (http://www.catalyst.net.nz)
842            - mahara <unfixed>
843    
844    savant2 (http://phpsavant.com)
845            - egroupware <unfixed>
846    
847    rssparser (http://nwow.org)
848            - egroupware <unfixed>
849            - phpgroupware <unfixed>
850    
851    lcms
852            - openjdk-6 <unfixed> (fork)
853    
854    libphp-phplayersmenu
855            - diogenes <unfixed>
856            - phpldapadmin <unfixed>
857    
858    libphp-pclzip
859            - docvert <unfixed>
860            - moodle <unfixed>
861            - egroupware <unfixed>
862    
863    libphp-simplepie
864            - dokuwiki <unfixed>
865    
866    libphp-jpgraph
867            - egroupware <unfixed>
868    
869    php-simpletest
870            - moodle <unfixed>
871    
872    libpng
873            - iceweasel <not-affected> (uses xulrunner)
874            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
875            - iceape 1.0.13~pre080614i-0etch1 (embed)
876            - xulrunner 1.9.0.13-1 (embed)
877            [lenny] - xulrunner 1.9.0.11-0lenny1
878            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
879            - gamera 3.2.3-1 (embed)
880    
881    irssi
882            - silc-client <unfixed> (embed)
883            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
884    
885    extc
886            - mtasc <unfixed> (embed)
887            - haxe <unfixed> (embed)
888    
889    swflib
890            - mtasc <unfixed> (embed)
891            - haxe <unfixed> (embed)
892    
893    libitext-java
894            - bouncycastle 2.1.4-1 (embed)
895    
896    python-ply
897            - pyke <unfixed> (embed; bug #555363)
898            - pywbem <unfixed> (embed; bug #555364)
899            - sepolgen <unfixed> (embed; bug #555365)
900            - zope-textindexng3 <unknown> (embed)
901            - iceweasel <unknown> (embed)
902            - xulrunner <unknown> (embed)
903            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
904    
905    libdumbnet (libdnet upstream)
906            - nmap <unfixed> (fork)
907    
908    gcc-4.4
909            - gcc-mingw32 <unfixed> (embed)
910    
911    camlimages
912            - advi <unfixed> (static; bug #550441)
913    
914    memcached
915            - memcachedb <unfixed> (embed)
916    
917    yajl
918            - argyll <unfixed> (embed; bug #544223)
919            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
920    
921    libept
922            - adept <unfixed> (embed; bug #540649)
923    
924    libvorbis
925            - iceweasel <not-affected> (uses xulrunner)
926            - xulrunner <unfixed> (embed; bug #540959)
927            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
928            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
929    
930    cairo
931            - iceweasel <not-affected> (uses xulrunner)
932            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
933    
934    liboggz
935            - iceweasel <not-affected> (uses xulrunner)
936            - xulrunner <unfixed> (embed; bug #540949)
937            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
938            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
939    
940    
941    liboggplay
942            - iceweasel <not-affected> (uses xulrunner)
943            - xulrunner <unfixed> (embed; bug #540949)
944            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
945            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
946    
947    php-net-dnsbl
948            - serendipity <unfixed> (embed)
949    
950    php-onyx-rss
951            - serendipity <unfixed> (embed)
952    
953    php-text-wiki
954            - serendipity <unfixed> (embed)
955    
956    php-xml-rpc
957            - serendipity <unfixed> (embed)
958    
959    polarssl (does not have a shared library)
960            - pdkim <itp> (embed; bug #543150)
961            - xyssl <unfixed> (old-version)
962    
963    pidgin
964            - gaim <removed> (old-version)
965    
966    icu
967            - webkit 1.0.1-1 (embed; bug #547214)
968            - texlive-bin <unfixed> (fork)
969            NOTE: texlive upstream working with icu upstream to merge their changes
970    
971    cyrus-imapd-2.2
972            - kolab-cyrus-imapd <unfixed> (fork)
973            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
974    
975    python-cxx-dev
976            - freecad <unfixed> (embed; bug #547936)
977    
978    libzipios++-dev
979            - freecad <unfixed> (embed; bug #547941)
980    
981    linux-2.6
982            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
983            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
984            - kernel-source-2.6.8 <removed> (old-version)
985            - kernel-source-2.4.27 <removed> (old-version)
986            - kernel-source-2.4.24 <removed> (old-version)
987            - kernel-source-2.2.25 <removed> (old-version)
988            - kernel-source-2.2.20 <removed> (old-version)
989    
990    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
991            - kvm <unfixed> (embed) [./libfdt/*]
992    
993    qweb (not packaged)
994            - ajaxterm <unfixed>
995    
996    opensaml2
997            - opensaml <removed> (old-version)
998    
999    shibboleth-sp2
1000            - shibboleth-sp <removed> (old-version)
1001    
1002    tuxonice-userui
1003            - suspend2-userui <removed> (old-version)
1004    
1005    expat
1006            - w3c-libwww <removed> (embed; bug #551941)
1007            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1008            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1009            - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1010            - python2.4 <unfixed> (embed; bug #553403)
1011            - wxwindows2.4 <removed> (embed)
1012            - wxwidgets2.6 <unfixed> (embed)
1013            - wxwidgets2.8 <unfixed> (embed)
1014            - celementtree <unfixed> (embed)
1015            - audacity <unfixed> (embed)
1016            - matanza <unfixed> (embed)
1017            - tdom <unfixed> (embed)
1018            - udunits <unfixed> (embed)
1019            - apr-util 1.2 (embed)
1020            - ayttm <unfixed> (embed)
1021            - cableswig <unfixed> (embed)
1022            - cadaver <unfixed> (embed)
1023            - cmake <unfixed> (embed)
1024            - coin3 <unfixed> (embed)
1025            - gdcm <unfixed> (embed)
1026            - ghostscript <unfixed> (embed)
1027            - grmonitor <unfixed> (embed)
1028            - iceape <unfixed> (embed)
1029            - insighttoolkit <unfixed> (embed)
1030            - libparagui1.1 <unfixed> (embed)
1031            - paraview <unfixed> (embed)
1032            - poco <unfixed> (embed)
1033            - simgear <unfixed> (embed)
1034            - sitecopy <unfixed> (embed)
1035            - smart 1.0-1 (embed)
1036            [etch] - smart <unfixed> (embed)
1037            - swish-e <unfixed> (embed)
1038            - tla <unfixed> (embed)
1039            - vtk <unfixed> (embed)
1040            - wbxml2 <unfixed> (embed)
1041            - xmlrpc-c <unfixed> (embed)
1042            - iceweasel <unfixed> (embed)
1043            - kompozer <unfixed> (embed)
1044            - vxl <unfixed> (embed)
1045            - xulrunner <unfixed> (embed)
1046            - apache2 2.2 (embed)
1047            - texlive-bin <unfixed> (embed) [included twice]
1048            - vnc4 <unfixed> (embed)
1049            - xotcl <unfixed> (embed)
1050    
1051    xerces-c
1052            - xerces-c2 <unfixed> (old-version)
1053            - xerces27 <removed> (old-version)
1054    
1055    md5 (RSA's version; not the gnu version provided by coreutils)
1056            - w3c-libwww <removed> (embed; bug #551942)
1057            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1058    
1059    enet
1060            - sauerbraten <unfixed> (embed; #497194)
1061    
1062    eglibc
1063            - glibc <removed> (old-version)
1064    
1065    galib
1066            - gamera 3.2.3-1 (embed)
1067    
1068    configobj
1069            - bzr <unfixed> (embed; bug #555336)
1070            - elisa <unfixed> (embed; bug #555337)
1071            - gaupol <unfixed> (embed; bug #555338)
1072            - ipython <unfixed> (embed; bug #555339)
1073            - pida <unfixed> (embed; bug #555340)
1074            - psychopy <unfixed> (embed; bug #555341)
1075            - rest2web <unfixed> (embed; bug #555342)
1076            - auth2db <unknown> (embed)
1077            - dynagen <unknown> (embed)
1078            - iceweasel <unknown> (embed)
1079            - sabnzbdplus <unknown> (embed)
1080            - xulrunner <unknown> (embed)
1081            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1082    
1083    python-clientform
1084            - bibus <unfixed> (embed; bug #555332)
1085            - zope2.10 <unfixed> (embed; bug #555333)
1086            - zope2.11 <unfixed> (embed; bug #555334)
1087            - python-mechanize <unknown> (embed)
1088            - twill <unknown> (embed)
1089    
1090    python-mechanize
1091            - zope2.10 <unfixed> (embed; bug #555337)
1092            - zope2.11 <unfixed> (embed; bug #555338)
1093            - twill <unknown> (embed; bug #555339)
1094    
1095    pexpect
1096            - duplicity <unfixed> (embed; bug #555361)
1097            - hplip <unfixed> (embed; bug #555362)
1098            - smart <unfixed> (embed; bug #555363)
1099    
1100    pyparsing
1101            - bauble <unfixed> (embed; bug #555366)
1102            - boa-constructor <unfixed> (embed; bug #555367)
1103            - calibre <unfixed> (embed; bug #555368)
1104            - matplotlib <unfixed> (embed; bug #531024)
1105            - zhpy <unfixed> (embed; bug #555370)
1106            - polybori <unknown> (embed)
1107            - python-whoosh <unknown> (embed)
1108            - twill <unknown> (embed)
1109            - zope-textindexng3 <unknown> (embed)
1110    
1111    python-pysqlite2
1112            - python2.4 <unfixed> (embed; bug #553403)
1113            - python2.5 <unfixed> (embed; bug #553403)
1114    
1115    celementtree
1116            - python2.5 <unfixed> (embed)
1117            - smart 1.0-1 (embed)
1118            [etch] - smart <unfixed> (embed)
1119    
1120    elementtree
1121            - python2.5 <unfixed> (embed)
1122            - bzr <unfixed> (embed; bug #555343)
1123            - gedit 2.28.2-1 (embed; bug #555344)
1124            - smart 1.0-1 (embed)
1125            [etch] - smart <unfixed> (embed)
1126            - solfege <unfixed> (embed; bug #555345)
1127            - w3af <unfixed> (embed; bug #555346)
1128            - python-qt4 <unknown> (embed)
1129            - sphinx <unknown> (embed)
1130            - python-nltk <itp> (embed)
1131    
1132    python2.5
1133            - python2.4 <unfixed> (old-version)
1134            - jython <unfixed> (embed)
1135            NOTE: embeds many stdlib modules
1136            - python-django <unfixed> (embed; bug #555419)
1137            NOTE: embeds stdlib modules: doctest, decimal
1138            - gamera 3.2.3-1 (embed)
1139            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1140            - boa-constructor <unfixed> (embed; bug #555426)
1141            NOTE: embeds stdlib modules: ConfigParser
1142            - nicotine <unfixed> (embed; bug #555427)
1143            NOTE: embeds stdlib modules: ConfigParser
1144            - museek+ <unfixed> (embed; bug #555428)
1145            NOTE: embeds stdlib modules: ConfigParser
1146            - vegastrike-data <unfixed> (embed)
1147            NOTE: embeds many stdlib modules
1148            - codespeak-lib <unfixed> (embed; bug #555420)
1149            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1150            - config-manager <unfixed> (embed; bug #555423)
1151            NOTE: embeds stdlib modules: optparse
1152            - jhbuild <unfixed> (embed; bug #555421)
1153            NOTE: embeds stdlib modules: optparse, subprocess
1154            - smart <unfixed> (embed; bug #555432)
1155            NOTE: embeds stdlib modules: optparse
1156            - pyprotocols <unfixed> (embed; bug #555433)
1157            NOTE: embeds stdlib modules: doctest
1158            - ruledispatch <unfixed> (embed; bug #555434)
1159            NOTE: embeds stdlib modules: doctest
1160            - distribute <unfixed> (embed)
1161            NOTE: embeds stdlib modules: doctest
1162            - python-setuptools <unfixed> (embed; bug #555435)
1163            NOTE: embeds stdlib modules: doctest
1164            - zope.testing <unfixed> (embed; bug #555436)
1165            NOTE: embeds stdlib modules: doctest
1166            - translate-toolkit <unfixed> (embed; bug #555422)
1167            NOTE: embeds stdlib modules: textwrap, contextlib
1168            - libtpclient-py <unfixed> (embed; bug #555424)
1169            NOTE: embeds stdlib modules: subprocess
1170            - grass <unfixed> (embed; bug #555425)
1171            NOTE: embeds stdlib modules: subprocess
1172            - coherence <unfixed> (embed; bug #555429)
1173            NOTE: embeds stdlib modules: uuid
1174            - python-django-extensions <unfixed> (embed; bug #555430)
1175            NOTE: embeds stdlib modules: uuid
1176            - setroubleshoot <unfixed> (embed; bug #555431)
1177            NOTE: embeds stdlib modules: uuid
1178            - linkchecker <unfixed> (embed; bug #555414)
1179            NOTE: embeds msgfmt.py script
1180            - imdbpy <unfixed> (embed)
1181            NOTE: embeds msgfmt.py script
1182            - kiwi <unfixed> (embed)
1183            NOTE: embeds msgfmt.py script
1184            - moin <unfixed> (embed)
1185            NOTE: embeds msgfmt.py script
1186            - plone3 <unfixed> (embed)
1187            NOTE: embeds msgfmt.py script
1188            - roundup <unfixed> (embed)
1189            NOTE: embeds msgfmt.py script
1190            - rednotebook <unfixed> (embed; bug #555415)
1191            NOTE: embeds msgfmt.py script
1192            - turbogears <unfixed> (embed)
1193            NOTE: embeds msgfmt.py script
1194            - elisa <unfixed> (embed)
1195            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1196            - calibre <unfixed> (embed)
1197            NOTE: embeds msgfmt.py script
1198            - mailman <unfixed> (embed; #555416)
1199            NOTE: embeds msgfmt.py script
1200            - python-docutils <unknown> (embed)
1201            NOTE: embeds stdlib modules: optparse, textwrap
1202            - python-imaging <unknown> (embed)
1203            NOTE: embeds stdlib modules: doctest
1204            - python-mechanize <unknown> (embed)
1205            NOTE: embeds stdlib modules: doctest
1206            - twill <unknown> (embed)
1207            NOTE: embeds stdlib modules: subprocess
1208            - zeroc-ice <unknown> (embed)
1209            NOTE: embeds stdlib modules: subprocess
1210            - wxwidgets2.8 <unknown> (embed)
1211            NOTE: embeds stdlib modules: subprocess
1212            - cycle <unknown> (embed)
1213            NOTE: embeds msgfmt.py script
1214            - deluge <unknown> (embed)
1215            NOTE: embeds msgfmt.py script
1216            - opendict <unknown> (embed)
1217            NOTE: embeds msgfmt.py script
1218            - openerp-client <unknown> (embed)
1219            NOTE: embeds msgfmt.py script
1220            - rapidsvn <unknown> (embed)
1221            NOTE: embeds msgfmt.py script
1222            - wammu <unknown> (embed)
1223            NOTE: embeds msgfmt.py script
1224            - gaphor <unknown> (embed)
1225            NOTE: embeds msgfmt.py script
1226            - pida <unknown> (embed)
1227            NOTE: embeds msgfmt.py script
1228            - python-formencode <unknown> (embed)
1229            NOTE: embeds msgfmt.py script
1230    
1231    argparse
1232            - twill <unfixed> (embed; bug #555347)
1233            - ipython <unfixed> (embed; bug #555348)
1234    
1235    coherence
1236            - elisa <unfixed> (embed; bug #555335)
1237    
1238    simpletal
1239            - plastex <unfixed> (embed; bug #555371)
1240    
1241    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1242            - postr <unfixed> (embed)
1243            - elisa <unfixed> (embed)
1244    
1245    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1246            - apertium-tolk <unfixed> (embed)
1247            - ipython <unfixed> (embed)
1248            - virtaal <unfixed> (embed)
1249    
1250    distribute
1251            - setuptools <removed> (old-version)
1252    
1253    rails
1254            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1255            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1256            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1257            - thin <unfixed> (embed) [./spec/rails_app/*]
1258            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1259            NOTE: be dangerous if developers are naively basing their code off of the examples
1260            NOTE: prototype.js is among the example files
1261    
1262    lucene2 (prototype.js is among the embeds in the following)
1263            - lucene <unfixed> (old-version)
1264            - pylucene <unfixed> (embed)
1265            - libpdfbox-java <unfixed> (embed)
1266            - libfontbox-java <unfixed> (embed)
1267            - libjempbox-java <unfixed> (embed)
1268            - solr <unfixed> (embed)
1269    
1270    unicode-data
1271            - syslinux <unfixed> (embed)
1272            - camomile <unfixed> (embed)
1273            - fribidi <unfixed> (embed)
1274            - m17n-db <unfixed> (embed)
1275            - sbcl <unfixed> (embed)
1276            - heimdal <unfixed> (embed)
1277            - icu <unfixed> (embed)
1278            - icu4j <unfixed> (embed)
1279            - krb5 <unfixed> (embed)
1280            - moodle <unfixed> (embed)
1281            - openldap <unfixed> (embed)
1282            - pike7.6 <unfixed> (embed)
1283            - samba <unfixed> (embed)
1284            - samba4 <unfixed> (embed)
1285            - cmucl <unfixed> (embed)
1286            - typo3-src <unfixed> (embed)
1287            - mauve <unfixed> (embed)
1288            - texlive-bin <unfixed> (embed)
1289            - ypsilon <unfixed> (embed)
1290            - jeuclid <unfixed> (embed)
1291            - charmap.app <unfixed> (embed)
1292            - clisp <unfixed> (embed)
1293            - gnulib <unfixed> (embed)
1294            - opensrs-client <unfixed> (embed)
1295            - saxonb <unfixed> (embed)
1296            - rails <unfixed> (embed)
1297    
1298    feedparser
1299            - rawdog <unfixed> (embed; bug #383422)
1300            - miro <unfixed> (embed; bug #555351)
1301            - calibre <unfixed> (embed; bug #555352)
1302            - freevo <unfixed> (embed; bug #555353)
1303            - pida <unfixed> (embed; bug #555354)
1304            - planet-venus <unfixed> (embed; bug #555355)
1305            - plone3 <unfixed> (embed; bug #555356)
1306            - exaile 0.2.14+debian-1 (embed)
1307            - screenlets 0.1.2-3 (embed)
1308            NOTE: included twice
1309    
1310    agg:
1311            - matplotlib <unfixed> (embed: bug #377271)
1312            - contextfree <unfixed> (embed)
1313            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1314            - exactimage <unfixed> (embed)
1315            - python-enable <unfixed> (embed)
1316            - mapnik 0.5.1-3 (embed)
1317            NOTE: links statically to agg, but shared library is not available (bug #377271)
1318    
1319    vtk
1320            - paraview <unfixable> (embed; bug #495426)
1321    
1322    txt2tags
1323            - rednotebook <unfixed> (embed)
1324    
1325    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1326            - gajim <unfixed> (embed)
1327            - emesene <unfixed> (embed)
1328            - convirt <unfixed> (embed)
1329            - pida <unfixed> (embed)
1330            - rednotebook <unfixed> (embed)
1331    
1332    horde3 (prototype.js is among the embeds in the following)
1333            - mnemo2 <unfixed> (embed)
1334            - nag2 <unfixed> (embed)
1335    
1336    cimg
1337            - gmic <itp> (embed)
1338    
1339  liba52:  mootools
1340  a52dec          - gmic <itp> (embed)
 xine-lib  
1341    
1342  libmpeg2:  openldap
1343  mpeg2dec          - openldap2.3 <removed> (old-version)
 xine-lib  
1344    
1345  curl:  grub2
1346  wget (code for NTLM authentication)          - grub <unfixed> (old-version)

Legend:
Removed from v.3064  
changed lines
  Added in v.13287

  ViewVC Help
Powered by ViewVC 1.1.5