/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7487 by jamie-guest, Mon Dec 3 21:58:43 2007 UTC revision 13290 by jwilk-guest, Sun Nov 15 08:02:07 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp>, <not-affected>, <unknown> if the version number can not
15  ruby-gnome2 (has a copy of poppler but links against the shared lib)          be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  silc-toolkit:  sort: static (linking statically against a lib)
18  silc-client (uses libsilc and libsilcclient)        embed (embedding a copy of the library into another source package)
19          fork (the package is not just embedding code but it is a fork and
20  dietlibc:              thus might share parts of the source code)
21  ccontrol (links statically)        old-version (the package is an older version of essentially
22                       the same code)
23  libiax:  
24  iaxmodem  The srcpkg might be some string to identify the code if there is no
25    specific source package.
26  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
27  dpkg  Everything up to the next line is ignored.
28  rsync (somehow derived code base)  ---BEGIN
29  mono  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30  mozilla(?)          NOTE: Fixed packages link to poppler library unless otherwise noted
31  Linux kernels          - pdftohtml <unknown>
32  pvpgn (links dynamically since 1.7.8-2)          [sarge] - pdftohtml <unfixed>
33  mrtg (links dynamically since 2.12.2-1)          [etch] - pdftohtml <unfixed>
34  rpm          NOTE: has been replaced by poppler-utils
35            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36  libbz2:          - texlive-base 3.0-12 (embed)
37  dpkg (statically linked)          - texlive-bin 2007-1 (embed)
38            NOTE: links to poppler
39  libgadu/ekg:          - koffice <unfixed> (embed; bug #436163)
40  centericq          - libextractor 0.5.12-1 (embed)
41  gaim          NOTE: libextractor is using its own pdf decoder now
42  pigdin (links dynamically against libgadu)          - ipe <unfixed> (embed)
43  kopete (ships the code, but links dynamically in the Debian package)          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44  kadu (not packaged in Debian)          - ruby-gnome2 <unknown> (embed)
45  GNU gadu (not yet packaged in Debian)          NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47  xmlrpc: (which package is the "origin" of this code?)          - swftools <unfixed> (embed; bug #551293)
48  drupal          - poppler <unfixable> (fork)
49  phpgroupware  
50  egroupware  ppmd
51  phpwiki          - libcomplearn-mod-ppmd <unfixed> (fork)
52  php4 (php-pear, IIRC this was reorganized some weeks ago?)          NOTE: discussion in #458152
53    
54  shtool: (affects build-time only)  libevent
55  mysql-ocaml          - transmission 1.71-1 (embed; bug #529372)
56  php4  
57    lrmi
58  mozilla:          - read-edid 2.0.0-1 (embed; bug #495131)
59  mozilla-firefox  
60  mozilla-thunderbird  peercast
61  firefox (to be removed)          - gnome-peercast <removed> (embed)
62  thunderbird (to be removed)          [etch] - gnome-peercast <unfixed> (embed)
63  iceweasel  
64  iceape  silc-toolkit
65  icedove          - silc-client 1.1~beta6-1 (embed)
66  xulrunner  
67  nvu (no longer in Debian)  icclib
68            - ghostscript <unfixed> (embed)
69  xli:          - argyll <unfixed> (embed)
70  xloadimage  
71    dietlibc
72  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          - ccontrol 0.9.1+20071204-1 (static)
73  openmotif  
74  xfree86/xorg (in libxpm)  libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76  kerberized apps with BSD origin:          TODO: report bug
77  krb4  
78  krb5  libiax
79  heimdal          - iaxmodem <unfixable> (embed; bug #548885)
80    
81  grip: (which pkg is the origin?)  spandsp
82  libcdaudio          - iaxmodem <unfixable> (embed; bug #548885)
83  grip  
84  gnome-vfs (vfs2 as well?)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85            - dpkg <unfixed> (embed)
86  fudforum:          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87  phpgroupware-fudforum          - rsync <unfixed> (embed)
88  egroupware-fudforum (removed from egroupware after sarge)          NOTE: somehow derived code base
89            - mono <unfixed> (embed)
90  cvs:          TODO: check mozilla
91  gcvs (at least an additional script is included, check if there's more)          - Linux kernels <unfixed> (embed)
92            - pvpgn 1.7.8-2 (embed)
93  pcre:          - mrtg 2.12.2-1 (embed)
94  all pythons          - rpm <unknown> (embed)
95  php4 (src included, but Debian package links dynamically)          NOTE: pinged anibal since when rpm was fixed
96  analog (src included, but Debian package links dynamically)          - tuxcmd-modules <unfixed> (embed)
97  libgoffice-1          - zsync <unfixed>
98  vfu (#450754)          - tra <unfixed>
99  tf5 (since 5.0beta7 the Debian package links dynamically)          - sash <unfixed>
100  monotone (including this starting from 0.37)          - nsis <unfixed>
101  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          - mseide-msegui <unfixed>
102  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)          NOTE: mseide
103  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)          - mirrordir <unfixed>
104            - poco <unfixed>
105  tiff:          - klibc <unfixed>
106  wxpythongtk (check, which debian pkg this is in)          - ghostscript <unfixed>
107  older kdegraphics/kpdf releases < 3.3 embedded a copy          - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109  uudeview:          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110  libconvert-uulib-perl          - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112  sqlite: (not affected by security vulnerabilities so far)          - perl <unfixed>
113  amarok          - paraview <unfixed>
114  monotone          - gcvs <unfixed>
115  iceweasel          - dump <unfixed>
116            - aide <unfixed> (static)
117  util-linux/mount:          - dar <unfixed> (static)
118  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - avfs <unfixed>
119            - fpc <unfixed>
120  webmin:          - winff <unfixed>
121  usermin (only in sarge)          NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123  sylpheed:          NOTE: inherited from fpc, see #472304
124  sylpheed-claws          - erlang <unfixed> (embed)
125            - gamera 3.2.3-1 (embed)
126  phpsysinfo:          - python2.4 <unfixed> (embed; bug #553403)
127  egroupware          - python2.5 <unfixed> (embed; bug #553403)
128  phpgroupware  
129    dulwich
130  phpldapadmin:          - hg-git 0.1.0-1 (embed; bug #541996)
131  egroupware (removed from egroupware after sarge)  
132    libvigraimpex
133  chmlib:          - hugin <unfixed> (embed; bug #542259)
134  kchmviewer (ships the code but links dynamically)          - enblend-enfuse <unfixed> (embed; bug #542258)
135            - gamera 3.2.3-1 (embed)
136  libavcodec/libavformat (source: ffmpeg):  
137  mplayer (#395252)  libbz2
138  xvidcap          - dpkg <unfixed> (static)
139  kino (links statically, does not include code)  
140  vlc (links statically, does not include code)  libgadu
141  smilutils (links statically, does not include code)          - centericq <unfixed> (embed)
142  motion (links statically, does not include code)          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143  gst-ffmpeg          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144  gstreamer0.10-ffmpeg          - kdenetwork 4:3.3.2-5 (embed)
145  xmovie          NOTE: from kdenetwork: kopete
146            - ekg 1:1.8~rc0-1 (embed)
147            - kadu 0.6.0.2-3 (embed; bug #504430)
148            - gadu <itp> (embed)
149    
150    xmlrpc (which package is the "origin" of this code?)
151            - drupal <unfixed> (embed)
152            - phpgroupware <unfixed> (embed)
153            - egroupware <unfixed> (embed)
154            - phpwiki <unfixed> (embed)
155            - php4 <unfixed> (embed)
156            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157    
158    shtool (affects build-time only)
159            - mysql-ocaml <unfixed> (embed)
160            - php4 <unfixed> (embed)
161    
162  mad MPEG decoding lib:  iceape
163  mad          - iceweasel <unfixed> (fork)
164  xine-lib          - icedove <unfixed> (fork)
165            - xulrunner <unfixed> (fork)
166            - kompozer <unfixed> (embed; bug #532168)
167            - galeon <unfixed> (fork)
168            - epiphany-browser <unfixed> (fork)
169            - conkeror <unfixed> (fork)
170            - kazehakase <unfixed> (fork)
171    
172    xli
173            - xloadimage <unfixed> (embed)
174    
175    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
176            - openmotif <unfixed> (embed)
177            - libxpm <unfixed> (embed)
178    
179    kerberized apps with BSD origin
180            - krb4 <removed> (embed)
181            - krb5 <unfixed> (embed)
182            - heimdal <unfixed> (embed)
183    
184    grip (which pkg is the origin?)
185            - libcdaudio <unfixed>
186            - grip <unfixed>
187            - gnome-vfs <unfixed>
188            TODO: check vfs2 as well
189    
190    fudforum
191            [etch] - phpgroupware <unfixed> (embed)
192            NOTE: phpgroupware-fudforum
193            [sarge] - egroupware-fudforum <removed> (embed)
194    
195    libbsd
196            - rdate 1:1.2-3 (embed)
197            - atheme-services <unfixed>
198            - libbsd-arc4random-perl <unfixed>
199            - isakmpd <unfixed>
200    
201    cvs
202            - gcvs <unfixed> (embed)
203            NOTE: see cvsunix/src in tarball
204    
205    pcre3
206            - php4 <unknown> (embed)
207            - analog 2:5.23-0woody1 (embed)
208            - goffice <unfixed> (embed)
209            NOTE: libgoffice-*
210            - vfu 4.06-4.1 (embed; bug #450754)
211            - tf5 5.0beta7-1 (embed)
212            - monotone 0.43-1 (embed)
213            NOTE: this only affects versions >= 0.37
214            - glib2.0 2.15.2-1 (embed)
215            - apache2 2.0.53-4 (embed)
216            - exim4 4.10-0.srh20.12 (embed)
217            - yacas <unfixed> (embed)
218            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
219            - gtamsanalyzer.app 0.42-5 (embed)
220            - tin 980117-1 (embed)
221            - kazehakase 0.5.2-1
222            - webkit 1.0.1-1 (embed)
223            - qt4-x11 <unfixed> (embed)
224            NOTE: embedded via webkit copy
225            - erlang <unfixed> (embed)
226    
227    tiff
228            - wxwindows2.4 2.2.1 (embed)
229            - gamera 3.2.3-1 (embed)
230    
231    uudeview
232            - libconvert-uulib-perl <unfixed> (embed)
233            - pan <unfixed> (embed)
234    
235    sqlite (not affected by security vulnerabilities so far)
236            - amarok <unfixed> (embed)
237            - monotone 0.43-1 (embed)
238            - iceweasel <unfixed> (embed)
239    
240    util-linux/mount
241            - loop-aes-utils <unfixed> (embed)
242            NOTE: contains code from util-linux' mount in the mount-aes-udeb
243    
244    sylpheed
245            - sylpheed-claws <unfixed> (fork)
246    
247    phpsysinfo
248            - egroupware <unfixed> (embed)
249            - phpgroupware <unfixed> (embed)
250    
251    phpldapadmin
252            [sarge] - egroupware <unfixed> (embed)
253            NOTE: removed from egroupware after sarge
254    
255    chmlib
256            - kchmviewer <unknown> (embed)
257    
258    ffmpeg (libavcodec/libavformat)
259            - mplayer 1.0~rc2-14 (embed; bug #395252)
260            - kino 1.0.0-1
261            - vlc <not-affected> (Links dynamically since initial release)
262            - smilutils 0.3.0-10
263            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
264            - motion 3.1.19-1
265            - gstreamer0.10-ffmpeg 0.10.3-2
266            - xmovie <removed> (static)
267            TODO: gimp-gap (potentially using ffmpeg code as well)
268            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
269    
270    faad2
271            - mplayer 1.0~rc2-20 (embed)
272            - avifile <unfixed> (embed; bug #538750)
273            - ffmpeg-debian <removed> (old-version)
274    
275    libmad (MPEG decoding lib)
276            - xine-lib <unfixed> (embed)
277            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
278            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
279    
 libdts:  
280  libdts  libdts
281  xine-lib          - xine-lib <unfixed> (embed)
282    
 flac:  
283  flac  flac
284  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
 alpine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
   
 libsndfile:  
 ardour  
   
 glibmm2.4:  
 ardour  
   
 libgnomecanvasmm2.6:  
 ardour  
   
 libsigc++-2.0:  
 ardour  
   
 soundtouch:  
 ardour  
   
 libmms:  
 xine-lib  
 mimms  
   
 FCKeditor: (packaged as fckeditor)  
 knowledgeroot  
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
285    
286    liba52
287            - a52dec <unfixed> (embed)
288            - xine-lib <unfixed> (embed)
289    
290    libmpeg2
291            - mpeg2dec <unfixed> (embed)
292            - xine-lib <unfixed> (embed)
293    
294    libntlm
295            - wget <unfixed> (fork; bug #550436)
296            - curl <unfixed> (fork; bug #550437)
297            - cntlm <unfixed> (fork; bug #550438)
298    
299    uw-imap
300            - pine <unfixed> (embed)
301            - alpine <unfixed> (embed)
302    
303    imagemagick
304            - graphicsmagick <unfixed> (fork)
305    
306    python-urlgrabber
307            - mercurial <unfixed> (embed; bug #531062)
308            - w3af <unfixed> (embed; bug #555372)
309            [experimental] - harvestman <unfixed> (embed; bug #555373)
310    
311    beautifulsoup
312            - python-mechanize <unfixed> (embed; bug #555349)
313            - zope2.11 <unfixed> (embed; bug #555350)
314            - twill <unknown> (embed)
315    
316    halibut
317            - nsis <unfixed> (fork)
318    
319    libghttp
320            - hotway <unfixed> (embed)
321    
322    libsndfile
323            - ardour 1:2.7.1-1 (embed)
324    
325    glibmm2.4
326            - ardour 1:2.7.1-1 (embed)
327    
328    libgnomecanvasmm2.6
329            - ardour 1:2.7.1-1 (embed)
330    
331    libsigc++-2.0
332            - ardour 1:2.7.1-1 (embed)
333    
334    soundtouch
335            - ardour 1:2.7.1-1 (embed)
336    
337    libmms
338            - xine-lib <unfixed> (embed)
339            - mimms <unfixed> (embed)
340    
341    fckeditor
342            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
343            - moin 1.8.2-2 (embed; bug #452599)
344            - karrigell <removed> (embed; bug #452598)
345            - gforge 4.6.99+svn6225-1 (embed)
346            - request-tracker3.8 <unfixed> (embed)
347    
348    ipatlas (not packaged in Debian)
349            - moodle <unfixed> (embed; bug #507185)
350    
351    libphp-phpmailer
352            - moodle <unfixed> (embed; bug #507185)
353            - mahara <unfixed> (embed)
354            - symfony <unfixed> (embed)
355            [etch] - phpgroupware <unfixed> (embed)
356            NOTE: phpgroupware-felamimail is only in etch
357            - egroupware <unfixed> (embed; bug #504283)
358            - glpi <unfixed>
359    
360    htmlArea (not packaged in Debian)
361            - moodle <unfixed> (embed)
362    
363    giflib
364            - wine <unfixed> (embed; bug #466181)
365    
366    bennu (not packaged in Debian, http://bennu.sourceforge.net)
367            - moodle <unfixed> (embed)
368    
369    smarty
370            - moodle 1.8.2-2 (embed; bug #471158)
371            - gallery2 2.2.5-2 (embed; bug #471160)
372            - mahara 0.9.2-2 (embed; bug #471201)
373            - gosa 2.4beta1-1 (embed; bug #471200)
374    
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
375  TinyMCE  TinyMCE
376  bennu          - wordpress 2.5.1-3 (embed; bug #478257)
377            - moodle <unfixed> (embed; bug #507185)
378  TinyMCE:          - knowledgeroot <unfixed> (embed)
379  wordpress          - joomla <itp> (bug #326398)
380  moodle  
381  knowledgeroot  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
382  joomla (ITP)          - scite <unfixed> (embed)
383            - qscintilla <unfixed> (embed)
384  scintilla:          - qscintilla2 <unfixed> (embed)
385  scite          - geany <unfixed> (fork)
386  qscintilla          - anjuta <unfixed> (embed)
387  qscintilla2  
388  geany  libphp-adodb
389            - moodle <unfixed> (embed; bug #507185)
390  libphp-adodb:          NOTE: also AdoDB-XML Schema
391  gallery2          - gallery2 <unfixed> (embed)
392  phppgadmin          - phppgadmin <unfixed> (embed)
393  egroupware          - egroupware <unfixed> (embed)
394  phpwiki          - phpwiki <unfixed> (embed)
395  ipplan          - torrentflux 2.0beta1-2 (embed)
396  typo3          - ipplan <unfixed> (embed)
397  moodle          - typo3-src <unfixed> (embed)
398  cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)          - cacti <unknown> (embed)
399            [sarge] - cacti <unfixed> (embed)
400  gzip:          NOTE: dependency exists, but internal version is used
401  linux-kernel (lib/inflate.c)          - gforge 4.7~rc2-6 (embed)
402  klibc (based on linux-kernel gzip code)          - mahara <unfixed> (embed)
403  busybox  
404    gzip
405  neon:          - linux-kernel <unfixed> (embed)
406  cadaver (all, but being worked on: #188381)          NOTE: lib/inflate.c
407  gnome-vfs2 (#395874)          - klibc <unfixed> (embed)
408  litmus (#395875)          NOTE: based on linux-kernel gzip code
409  screem (sarge only)          - busybox <unfixed> (embed)
410  sitecopy (#395876)  
411  tla (etch/sid only: #395877)  neon
412            - cadaver 0.22.3+debian-1 (embed; bug #188381)
413  libmodplug:          - gnome-vfs2 <unfixed> (embed; bug #395874)
414  gst-plugins-bad0.10          [etch] - litmus <unfixed> (embed; #395875)
415            - litmus <removed> (embed; #395875)
416  libvncserver:          [sarge] - screem <unfixed> (embed)
417  vino          - sitecopy 1:0.16.3-5 (embed; bug #395876)
418            [etch] - tla <unfixed> (embed; bug #395877)
419  putty:          [sarge] - tla <unfixed> (embed; bug #395877)
420  filezilla  
421    libmodplug
422  tinyxml (not packaged in Debian):          - gst-plugins-bad0.10 <unfixed> (embed)
423  filezilla  
424    libvncserver
425  gv:          - vino <unfixed> (embed)
426  evince (ps/ tree from gv 3.5.8)  
427  evince-gtk (not packaged in Debian)  putty
428            - filezilla <unfixed> (embed)
429  libXbae:  
430  libpawlib2-lesstif package (from Cernlib)  tinyxml (not packaged in Debian)
431            - filezilla <unfixed>
432    
433    gv
434            - evince <unfixed> (embed)
435            NOTE: ps/ tree from gv 3.5.8
436            NOTE: evince-gtk is affected (a component of evince source package)
437    
438    libXbae
439            - paw <removed> (embed)
440            [etch] - paw <unfixed> (embed)
441    
442    libgtkhtml
443            - claws-mail-extra-plugins <unfixed> (fork)
444    
445    libXaw
446            - paw <removed> (embed)
447            [etch] - paw <unfixed> (embed)
448            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
449    
450    libgd2
451            - graphviz <unfixed> (embed)
452            NOTE: lib/gd seems to be 2.0.33
453            - wml <unfixed> (embed)
454            - libwmf <unfixed> (embed)
455            NOTE: derived from gd 1.6.3
456    
457    rar
458            - unrar-nonfree <unfixed> (embed)
459    
460    unrar-free (maybe this code is derived from the original rar, too?)
461            - clamav <unfixed> (embed)
462            NOTE: seems to be disabled in default config
463    
464    mplayer (DirectMedia Object loader)
465            - xine-lib <unfixed> (embed)
466            NOTE: src/libw32dll/
467            - vlc <unfixed> (embed)
468            NOTE: modules/codec/dmo/
469            - mplayer 1.0~rc2-20 (embed)
470    
471    libwpd (WordPerfect converter)
472            - openoffice.org <unfixed> (embed)
473    
474    fsplib (http://sourceforge.net/projects/fsp/)
475            - gftp <unfixed> (embed)
476            NOTE: lib/fsplib version 0.3
477    
478    sprng
479            - tree-puzzle <unfixed> (embed)
480    
481    librpcsecgss
482            - krb5 <unfixed> (embed)
483    
484    jasper
485            - ghostscript <unfixed> (embed)
486            - gs-gpl <unfixed> (embed)
487    
488    libiris
489            - psi <unfixed> (embed)
490            - kdenetwork <unfixed> (embed)
491            NOTE: kopete embeds libiris but links dynamically to libidn
492            - kdegames <unfixed> (embed)
493            NOTE: ksirk/kde4
494    
495    libidn
496            - monotone 0.43-1 (embed)
497            - psi <unfixed> (embed)
498            NOTE: psi embeds libiris which embeds libidn
499            - kdegames <unfixed> (embed)
500            NOTE: kdegames/kde4 embeds libiris which embeds libidn
501    
502    liblua
503            - monotone 0.43-1 (embed)
504            - nmap 5.00-1 (embed; bug #527997)
505            [lenny] - nmap <unfixed> (embed; bug #527997)
506    
507    libbotan
508            - monotone 0.43-1 (embed)
509    
510    NetXX
511            - monotone 0.43-1 (embed)
512    
513    libgc
514            - mono <unfixed> (embed)
515    
516    lzma
517            - p7zip <unfixed> (embed)
518            - xz-utils <unfixed> (fork)
519    
520    lzo
521            - grub2 <unfixed> (embed)
522    
523    yassl
524            - mysql-dfsg-5.0 <unfixed> (embed)
525    
526    pax code
527            - tar <unfixed> (embed)
528            - cpio <unfixed> (embed)
529    
530    t1lib
531            - tetex-bin 2.0.2-1 (embed)
532            - texlive-bin <unknown> (embed)
533    
534    guichan
535            - boswars <unfixed> (embed)
536            NOTE: maintainer notified us, working on it
537    
538    tolua
539            - boswars <unfixed> (embed)
540            NOTE: maintainer notified us, working on it
541    
542  libXaw:  asio-dev
543  libpawlib2-lesstif package (from Cernlib)          - luxrender <removed> (embed)
544    
545  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  xine-lib
546            - vlc <unfixed> (embed)
547  libgd2:          NOTE: only parts included in modules/access/rtsp
 graphviz (lib/gd seems to be 2.0.33)  
   
 rar:  
 unrar-nonfree  
   
 unrar-free: (maybe this code is derived from the original rar, too?)  
 clamav (seems to be disabled in default config)  
548    
549  mplayer (DirectMedia Object loader):  netpbm
550  xine-lib (src/libw32dll/)          - tcl8.3 <unfixed> (embed)
551  vlc (modules/codec/dmo/)          - tcl8.4 <unfixed> (embed)
552            - tcl8.5 <unfixed> (embed)
553            NOTE: generic/tkImgGIF.c
554    
555    tk8.5
556            - tk8.0 <removed> (old-version)
557            - tk8.3 <unfixed> (old-version)
558            - tk8.4 <unfixed> (old-version)
559            - perl-tk <unfixable> (fork)
560    
561    samba
562            - mc 2:4.6.2~git20080311-1 (embed)
563            NOTE: maintainer is aware of this, currently searching a solution
564    
565    plib1.8.4c2
566            - boson <unfixed> (fork)
567            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
568    
569    fribidi
570            - quesoglc <unfixed> (embed)
571            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
572    
573    glew
574            - quesoglc <unfixed> (embed; bug #489341)
575            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
576    
577    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
578            - transcend <unfixed> (embed)
579            - cultivation <unfixed> (embed)
580            - passage <unfixed> (embed)
581            - gravitation <unfixed> (embed)
582    
583  libwpd (WordPerfect converter):  tar
584  openoffice.org          - libarchive <unfixed> (embed)
585            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
586    
587  fsplib (http://sourceforge.net/projects/fsp/):  cpio
588  gftp (lib/fsplib version 0.3)          - libarchive <unfixed> (embed)
589            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
590    
591  librpcsecgss:  webkit
592  krb5          - qt4-x11 <unfixed> (embed)
593    
594  jasper:  ftgl
595  ghostscript          - blender 2.46+dfsg-1 (embed)
 gs-gpl  
596    
597  libidn:  wv
598  monotone          - abiword <unfixed>
599    
600    qemu
601            - kvm <unfixed> (embed; bug #543159)
602            - xen-3 <unfixed> (embed)
603            - xen-unstable <unfixed> (embed)
604    
605    vgabios
606            - kvm <unfixed> (embed; bug #489442)
607    
608    bochs
609            - kvm <unfixed> (embed; bug #489442)
610    
611    speex
612            - vorbis-tools <unfixed> (embed)
613            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
614            - gst-plugins-good0.10 <unfixed> (embed)
615            - xine-lib <unfixed> (embed)
616            - libfishsound <unfixed> (embed)
617            - libannodex <unfixed> (embed)
618            - vlc <unfixed> (embed)
619            - xmms-speex <unfixed> (embed)
620            - libsdl-sound1.2 <unfixed> (embed)
621            - sweep <unfixed> (embed)
622    
623    libreadline
624            - magic <itp> (old-version)
625    
626    opcode
627            - ode <unfixed> (embed)
628            NOTE: opcode is not a package in debian, it is just embedded
629            NOTE: http://www.codercorner.com/Opcode.htm
630    
631    gimpact
632            - ode <unfixed> (embed)
633            NOTE: gimpact is not a package in debian, it is just embedded
634            NOTE: http://gimpact.sf.net
635    
636    mochikit
637            - mahara <unfixed> (embed)
638            NOTE: they require extra patches, still unmerged upstream
639            - ntop <unfixed> (embed)
640            - coherence 0.6.2-1 (embed)
641            - paste <unfixed> (embed)
642            - turbogears <unfixed> (embed)
643            - plone3 <unfixed> (embed)
644            - xulrunner <unfixed> (embed)
645            - libjifty-plugin-chart-perl <unfixed> (embed)
646            - sabnzbdplus <unfixed> (embed)
647            - tgmochikit <unfixed> (embed)
648    
649    prototypejs
650            - netbeans-ide 6.0.1+dfsg-2 (embed)
651            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
652            - webcit <unfixed> (embed; bug #555219)
653            - asterisk 1:1.6.2.0~rc3-1 (embed)
654            - libjson-ruby 1.1.4-1 (embed; bug #555224)
655            - lucene2 <unfixed> (embed; bug #555226)
656            - horde3 <unfixed> (embed)
657            - knowledgeroot <unfixed> (embed; bug #555230)
658            - mediatomb <unfixed> (embed; bug #555233)
659            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
660            - ebug-http <unfixed> (embed; bug #555236)
661            - phpgedview <removed> (embed)
662            - poker-network <unfixed> (embed; bug #555238)
663            - rails 2.1.0-6 (embed)
664            - wordpress 2.5.0-2 (embed; bug #555243)
665            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
666            TODO: search through all of the other zope packages
667            - ampache 3.4.1-2 (embed)
668            - exaile <unfixed> (embed; bug #555245)
669            - hobix <unfixed> (embed; bug #555247)
670            - zabbix 1.6.6-4 (embed; bug #555250)
671            - chora2 <unfixed> (embed; bug #555253)
672            - gollem <unfixed> (embed; bug # 555254)
673            - jscropperui 1.2.1-1 (embed; bug #555257)
674            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
675            - ingo1 <unfixed> (embed; bug #555261)
676            - kronolith2 <unfixed> (embed; bug #555262)
677            - activeldap <unfixed> (embed)
678            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
679            - mantis <unfixed> (embed; bug #555265)
680            - otrs2 2.3.4-6 (embed; bug #555267)
681            - webcalendar <unfixed> (embed; bug #555269)
682            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
683            - jifty 0.90519-1 (embed; bug #555271)
684            - jquery <unfixed> (embed; bug #555272)
685            - passenger 2.2.5debian1-1 (embed; bug #555273)
686            - plone3 <unfixed> (embed; bug #555275)
687            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
688            - xulrunner <unfixed> (embed)
689            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
690    
691    gdb
692            - insight <unfixed> (embed)
693    
694    e2fsprogs
695            - ldiskfsprogs <unfixable> (fork)
696    
697    quazip (not packaged in Debian)
698            - qcake <unfixed> (embed)
699            NOTE: starting with upstream version 0.6.4
700    
701    exo
702            - pcmanfm <unfixed> (embed; bug #499677)
703            NOTE: slightly modified source code
704    
705    java
706            - openjdk-6 <unfixed>
707            - sun-java5 <unfixed>
708            - sun-java6 <unfixed>
709    
710    libphp-snoopy
711            - ampache 3.4.1-2 (embed; bug #504169)
712            - mahara 1.0.5-2 (embed; bug #504170)
713            - pixelpost 1.7.1-5 (embed; bug #504171)
714            - mediamate 0.9.3.6-5 (embed; bug #504172)
715            - opendb <removed> (embed; bug #504173)
716            [etch] - opendb <unfixed> (embed; bug #504173)
717            - wordpress 2.5.1-9 (embed; bug #443948)
718            - moodle <unfixed> (embed; bug #507185)
719            [etch] - phpgroupware <unfixed> (embed)
720            NOTE: phpgroupware-felamimail
721            - magpierss 0.72-3 (embed; bug #431089)
722    
723    jquery
724            - zekr <unfixed> (embed)
725            - wordpress <unknown> (embed)
726            - yocto-reader <unfixed> (embed)
727            - textpattern <unfixed> (embed)
728            - genshi 0.5.1-1 (embed)
729            NOTE: compressed file under examples/ dir
730            - prewikka <unfixed> (embed)
731            - libramaze-ruby <unfixed> (embed)
732            - drupal5 <unfixed> (embed)
733            - b2evolution <unfixed> (embed)
734            - wesnoth <unfixed> (embed)
735    
736    tablesorter (jquery plugin, not packaged yet)
737            - wesnoth <unfixed> (embed)
738    
739    kses
740            - wordpress <unfixed> (embed; bug #504242)
741            NOTE: their copy has all methods renamed to wp_<foo>
742            NOTE: kses isn't in Debian, RFP: #504240
743            - moodle <unfixed> (embed; bug #507185)
744            - egroupware <unfixed> (embed)
745    
746    magpierss
747            - wordpress <unfixed> (embed; bug #504242)
748            - moodle <unfixed>
749    
750    php-gettext
751            - wordpress 2.8.4-1 (embed; bug #504242)
752    
753    libphp-ixr (name may change, it is the Incutio XML-RPC)
754            - wordpress <unfixed> (embed; bug #504242)
755            NOTE: libphp-ixr isn't in Debian, RFP: #504236
756            - dokuwiki <unfixed> (embed)
757            - textpattern <unfixed> (embed)
758    
759    libphp-cas
760            - glpi <unfixed> (embed)
761            - moodle <unfixed> (embed; bug #505984)
762    
763    scriptaculous (prototype.js is among the embeds in the following)
764            - glpi <unfixed> (embed)
765            - libaws <unfixed> (embed; bug #555222)
766            - op-panel <unfixed> (embed)
767            - symfony <unfixed> (embed)
768            NOTE: maintainer says there are extra incompatible changes required
769            - pixelpost <unfixed> (embed)
770            - webhelpers <unfixed> (embed)
771            - qwik <unfixed> (embed; bug #555241)
772            - smokeping <unfixed> (embed)
773            - turba2 <unfixed> (embed)
774            - typo3-src 4.2.3-1 (embed)
775            - request-tracker3.6 <unfixed> (embed)
776            - request-tracker3.8 <unfixed> (embed)
777            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
778            - wordpress 2.5.0-2 (embed)
779    
780    libmarkdown-php
781            - moodle <unfixed> (embed; bug #507185)
782            - pixelpost <unfixed> (embed)
783    
784    php-openid
785            - wordpress-openid <itp> (embed)
786    
787    geshi
788            - dokuwiki 0.0.20080505-3.1 (embed)
789            - pgfouine 1.0-1.1 (embed)
790            - websvn 2.1.0-1 (embed)
791    
792    webcalendar
793            - gforge 4.7~rc2-6 (embed; bug #504758)
794    
795    libical
796            - kdepim <unfixed> (fork)
797            - kdepimlibs <unfixed> (fork)
798            NOTE: fixed in KDE4 post 4.1.x series
799            - claws-mail-extra-plugins <unfixed> (fork)
800    
801    libltdl3
802            - kdelibs <unfixed> (embed)
803            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
804            - synfig <unfixed> (embed)
805    
806    harfbuzz
807            - qt4-x11 <unfixed> (embed)
808    
809    libzip
810            - php5 <unfixed> (fork)
811            - odt2txt <unfixed> (embed; bug #523808)
812    
813    json.php (not packaged; should be replaced with php's built-in functions)
814            - moodle <unfixed>
815            - yui <unfixed>
816            - gallery2 <unfixed>
817            - dokuwiki <unfixed>
818            - typo3-src <unfixed>
819    
820    php-fpdf
821            - tcpdf <itp> (fork)
822            - moodle <unfixed>
823            - phpwiki <unfixed>
824            - egroupware <unfixed>
825            - ldap-account-manager <unfixed> (fork)
826    
827    tcpdf (itp: #495985)
828            - moodle <unfixed>
829            - phpmyadmin <unfixed>
830    
831  liblua:  typo3
832  monotone          - moodle <unfixed>
833    
834  libbotan:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
835  montone          - moodle <unfixed>
836            - gosa <unfixed>
837    
838    php-ole (itp: #487558)
839            - moodle <unfixed>
840    
841    pieforms (http://www.catalyst.net.nz)
842            - mahara <unfixed>
843    
844    savant2 (http://phpsavant.com)
845            - egroupware <unfixed>
846    
847    rssparser (http://nwow.org)
848            - egroupware <unfixed>
849            - phpgroupware <unfixed>
850    
851    lcms
852            - openjdk-6 <unfixed> (fork)
853    
854    libphp-phplayersmenu
855            - diogenes <unfixed>
856            - phpldapadmin <unfixed>
857    
858    libphp-pclzip
859            - docvert <unfixed>
860            - moodle <unfixed>
861            - egroupware <unfixed>
862    
863    libphp-simplepie
864            - dokuwiki <unfixed>
865    
866    libphp-jpgraph
867            - egroupware <unfixed>
868    
869    php-simpletest
870            - moodle <unfixed>
871    
872    libpng
873            - iceweasel <not-affected> (uses xulrunner)
874            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
875            - iceape 1.0.13~pre080614i-0etch1 (embed)
876            - xulrunner 1.9.0.13-1 (embed)
877            [lenny] - xulrunner 1.9.0.11-0lenny1
878            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
879            - gamera 3.2.3-1 (embed)
880    
881    irssi
882            - silc-client <unfixed> (embed)
883            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
884    
885    extc
886            - mtasc <unfixed> (embed)
887            - haxe <unfixed> (embed)
888    
889    swflib
890            - mtasc <unfixed> (embed)
891            - haxe <unfixed> (embed)
892    
893    libitext-java
894            - bouncycastle 2.1.4-1 (embed)
895    
896    python-ply
897            - pyke <unfixed> (embed; bug #555363)
898            - pywbem <unfixed> (embed; bug #555364)
899            - sepolgen <unfixed> (embed; bug #555365)
900            - zope-textindexng3 <unknown> (embed)
901            - iceweasel <unknown> (embed)
902            - xulrunner <unknown> (embed)
903            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
904    
905    libdumbnet (libdnet upstream)
906            - nmap <unfixed> (fork)
907    
908    gcc-4.4
909            - gcc-mingw32 <unfixed> (embed)
910    
911    camlimages
912            - advi <unfixed> (static; bug #550441)
913    
914    memcached
915            - memcachedb <unfixed> (embed)
916    
917    yajl
918            - argyll <unfixed> (embed; bug #544223)
919            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
920    
921    libept
922            - adept <unfixed> (embed; bug #540649)
923    
924    libvorbis
925            - iceweasel <not-affected> (uses xulrunner)
926            - xulrunner <unfixed> (embed; bug #540959)
927            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
928            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
929    
930    cairo
931            - iceweasel <not-affected> (uses xulrunner)
932            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
933    
934    liboggz
935            - iceweasel <not-affected> (uses xulrunner)
936            - xulrunner <unfixed> (embed; bug #540949)
937            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
938            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
939    
940    
941    liboggplay
942            - iceweasel <not-affected> (uses xulrunner)
943            - xulrunner <unfixed> (embed; bug #540949)
944            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
945            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
946    
947    php-net-dnsbl
948            - serendipity <unfixed> (embed)
949    
950    php-onyx-rss
951            - serendipity <unfixed> (embed)
952    
953    php-text-wiki
954            - serendipity <unfixed> (embed)
955    
956    php-xml-rpc
957            - serendipity <unfixed> (embed)
958    
959    polarssl (does not have a shared library)
960            - pdkim <itp> (embed; bug #543150)
961            - xyssl <unfixed> (old-version)
962    
963    pidgin
964            - gaim <removed> (old-version)
965    
966    icu
967            - webkit 1.0.1-1 (embed; bug #547214)
968            - texlive-bin <unfixed> (fork)
969            NOTE: texlive upstream working with icu upstream to merge their changes
970    
971    cyrus-imapd-2.2
972            - kolab-cyrus-imapd <unfixed> (fork)
973            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
974    
975    python-cxx-dev
976            - freecad <unfixed> (embed; bug #547936)
977    
978    libzipios++-dev
979            - freecad <unfixed> (embed; bug #547941)
980    
981    linux-2.6
982            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
983            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
984            - kernel-source-2.6.8 <removed> (old-version)
985            - kernel-source-2.4.27 <removed> (old-version)
986            - kernel-source-2.4.24 <removed> (old-version)
987            - kernel-source-2.2.25 <removed> (old-version)
988            - kernel-source-2.2.20 <removed> (old-version)
989    
990    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
991            - kvm <unfixed> (embed) [./libfdt/*]
992    
993    qweb (not packaged)
994            - ajaxterm <unfixed>
995    
996    opensaml2
997            - opensaml <removed> (old-version)
998    
999    shibboleth-sp2
1000            - shibboleth-sp <removed> (old-version)
1001    
1002    tuxonice-userui
1003            - suspend2-userui <removed> (old-version)
1004    
1005    expat
1006            - w3c-libwww <removed> (embed; bug #551941)
1007            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1008            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1009            - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1010            - python2.4 <unfixed> (embed; bug #553403)
1011            - wxwindows2.4 <removed> (embed)
1012            - wxwidgets2.6 <unfixed> (embed)
1013            - wxwidgets2.8 <unfixed> (embed)
1014            - celementtree <unfixed> (embed)
1015            - audacity <unfixed> (embed)
1016            - matanza <unfixed> (embed)
1017            - tdom <unfixed> (embed)
1018            - udunits <unfixed> (embed)
1019            - apr-util 1.2 (embed)
1020            - ayttm <unfixed> (embed)
1021            - cableswig <unfixed> (embed)
1022            - cadaver <unfixed> (embed)
1023            - cmake <unfixed> (embed)
1024            - coin3 <unfixed> (embed)
1025            - gdcm <unfixed> (embed)
1026            - ghostscript <unfixed> (embed)
1027            - grmonitor <unfixed> (embed)
1028            - iceape <unfixed> (embed)
1029            - insighttoolkit <unfixed> (embed)
1030            - libparagui1.1 <unfixed> (embed)
1031            - paraview <unfixed> (embed)
1032            - poco <unfixed> (embed)
1033            - simgear <unfixed> (embed)
1034            - sitecopy <unfixed> (embed)
1035            - smart 1.0-1 (embed)
1036            [etch] - smart <unfixed> (embed)
1037            - swish-e <unfixed> (embed)
1038            - tla <unfixed> (embed)
1039            - vtk <unfixed> (embed)
1040            - wbxml2 <unfixed> (embed)
1041            - xmlrpc-c <unfixed> (embed)
1042            - iceweasel <unfixed> (embed)
1043            - kompozer <unfixed> (embed)
1044            - vxl <unfixed> (embed)
1045            - xulrunner <unfixed> (embed)
1046            - apache2 2.2 (embed)
1047            - texlive-bin <unfixed> (embed) [included twice]
1048            - vnc4 <unfixed> (embed)
1049            - xotcl <unfixed> (embed)
1050    
1051    xerces-c
1052            - xerces-c2 <unfixed> (old-version)
1053            - xerces27 <removed> (old-version)
1054    
1055    md5 (RSA's version; not the gnu version provided by coreutils)
1056            - w3c-libwww <removed> (embed; bug #551942)
1057            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1058    
1059    enet
1060            - sauerbraten <unfixed> (embed; #497194)
1061    
1062    eglibc
1063            - glibc <removed> (old-version)
1064    
1065    galib
1066            - gamera 3.2.3-1 (embed)
1067    
1068    configobj
1069            - bzr <unfixed> (embed; bug #555336)
1070            - elisa <unfixed> (embed; bug #555337)
1071            - gaupol <unfixed> (embed; bug #555338)
1072            - ipython <unfixed> (embed; bug #555339)
1073            - pida <unfixed> (embed; bug #555340)
1074            - psychopy <unfixed> (embed; bug #555341)
1075            - rest2web <unfixed> (embed; bug #555342)
1076            - auth2db <unknown> (embed)
1077            - dynagen <unknown> (embed)
1078            - iceweasel <unknown> (embed)
1079            - sabnzbdplus <unknown> (embed)
1080            - xulrunner <unknown> (embed)
1081            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1082    
1083    python-clientform
1084            - bibus <unfixed> (embed; bug #555332)
1085            - zope2.10 <unfixed> (embed; bug #555333)
1086            - zope2.11 <unfixed> (embed; bug #555334)
1087            - python-mechanize <unknown> (embed)
1088            - twill <unknown> (embed)
1089    
1090    python-mechanize
1091            - zope2.10 <unfixed> (embed; bug #555337)
1092            - zope2.11 <unfixed> (embed; bug #555338)
1093            - twill <unknown> (embed; bug #555339)
1094    
1095    pexpect
1096            - duplicity 0.6.06-1 (embed; bug #555361)
1097            - hplip <unfixed> (embed; bug #555362)
1098            - smart <unfixed> (embed; bug #555363)
1099    
1100    pyparsing
1101            - bauble <unfixed> (embed; bug #555366)
1102            - boa-constructor 0.6.1-8 (embed; bug #555367)
1103            - calibre <unfixed> (embed; bug #555368)
1104            - matplotlib <unfixed> (embed; bug #531024)
1105            - zhpy <unfixed> (embed; bug #555370)
1106            - polybori <unknown> (embed)
1107            - python-whoosh <unknown> (embed)
1108            - twill <unknown> (embed)
1109            - zope-textindexng3 <unknown> (embed)
1110    
1111    python-pysqlite2
1112            - python2.4 <unfixed> (embed; bug #553403)
1113            - python2.5 <unfixed> (embed; bug #553403)
1114    
1115    celementtree
1116            - python2.5 <unfixed> (embed)
1117            - smart 1.0-1 (embed)
1118            [etch] - smart <unfixed> (embed)
1119    
1120    elementtree
1121            - python2.5 <unfixed> (embed)
1122            - bzr <unfixed> (embed; bug #555343)
1123            - gedit 2.28.2-1 (embed; bug #555344)
1124            - smart 1.0-1 (embed)
1125            [etch] - smart <unfixed> (embed)
1126            - solfege <unfixed> (embed; bug #555345)
1127            - w3af <unfixed> (embed; bug #555346)
1128            - python-qt4 <unknown> (embed)
1129            - sphinx <unknown> (embed)
1130            - python-nltk <itp> (embed)
1131    
1132    python2.5
1133            - python2.4 <unfixed> (old-version)
1134            - jython <unfixed> (embed)
1135            NOTE: embeds many stdlib modules
1136            - python-django <unfixed> (embed; bug #555419)
1137            NOTE: embeds stdlib modules: doctest, decimal
1138            - gamera 3.2.3-1 (embed)
1139            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1140            - boa-constructor <unfixed> (embed; bug #555426)
1141            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1142            - nicotine <unfixed> (embed; bug #555427)
1143            NOTE: embeds stdlib modules: ConfigParser
1144            - museek+ <unfixed> (embed; bug #555428)
1145            NOTE: embeds stdlib modules: ConfigParser
1146            - vegastrike-data <unfixed> (embed)
1147            NOTE: embeds many stdlib modules
1148            - codespeak-lib <unfixed> (embed; bug #555420)
1149            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1150            - config-manager <unfixed> (embed; bug #555423)
1151            NOTE: embeds stdlib modules: optparse
1152            - jhbuild <unfixed> (embed; bug #555421)
1153            NOTE: embeds stdlib modules: optparse, subprocess
1154            - smart <unfixed> (embed; bug #555432)
1155            NOTE: embeds stdlib modules: optparse
1156            - pyprotocols <unfixed> (embed; bug #555433)
1157            NOTE: embeds stdlib modules: doctest
1158            - ruledispatch <unfixed> (embed; bug #555434)
1159            NOTE: embeds stdlib modules: doctest
1160            - distribute <unfixed> (embed)
1161            NOTE: embeds stdlib modules: doctest
1162            - python-setuptools <unfixed> (embed; bug #555435)
1163            NOTE: embeds stdlib modules: doctest
1164            - zope.testing <unfixed> (embed; bug #555436)
1165            NOTE: embeds stdlib modules: doctest
1166            - translate-toolkit <unfixed> (embed; bug #555422)
1167            NOTE: embeds stdlib modules: textwrap, contextlib
1168            - libtpclient-py <unfixed> (embed; bug #555424)
1169            NOTE: embeds stdlib modules: subprocess
1170            - grass <unfixed> (embed; bug #555425)
1171            NOTE: embeds stdlib modules: subprocess
1172            - coherence <unfixed> (embed; bug #555429)
1173            NOTE: embeds stdlib modules: uuid
1174            - python-django-extensions <unfixed> (embed; bug #555430)
1175            NOTE: embeds stdlib modules: uuid
1176            - setroubleshoot <unfixed> (embed; bug #555431)
1177            NOTE: embeds stdlib modules: uuid
1178            - linkchecker <unfixed> (embed; bug #555414)
1179            NOTE: embeds msgfmt.py script
1180            - imdbpy <unfixed> (embed)
1181            NOTE: embeds msgfmt.py script
1182            - kiwi <unfixed> (embed)
1183            NOTE: embeds msgfmt.py script
1184            - moin <unfixed> (embed)
1185            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1186            - plone3 <unfixed> (embed)
1187            NOTE: embeds msgfmt.py script
1188            - roundup <unfixed> (embed)
1189            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1190            - rednotebook <unfixed> (embed; bug #555415)
1191            NOTE: embeds msgfmt.py script
1192            - turbogears <unfixed> (embed)
1193            NOTE: embeds msgfmt.py script
1194            - elisa <unfixed> (embed)
1195            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1196            - calibre <unfixed> (embed)
1197            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1198            - mailman <unfixed> (embed; #555416)
1199            NOTE: embeds msgfmt.py script
1200            - python-docutils <unknown> (embed)
1201            NOTE: embeds stdlib modules: optparse, textwrap
1202            - python-imaging <unknown> (embed)
1203            NOTE: embeds stdlib modules: doctest
1204            - python-mechanize <unknown> (embed)
1205            NOTE: embeds stdlib modules: doctest
1206            - twill <unknown> (embed)
1207            NOTE: embeds stdlib modules: subprocess
1208            - zeroc-ice <unknown> (embed)
1209            NOTE: embeds stdlib modules: subprocess
1210            - wxwidgets2.8 <unknown> (embed)
1211            NOTE: embeds stdlib modules: subprocess
1212            - cycle <unknown> (embed)
1213            NOTE: embeds msgfmt.py script
1214            - deluge <unknown> (embed)
1215            NOTE: embeds msgfmt.py script
1216            - opendict <unknown> (embed)
1217            NOTE: embeds msgfmt.py script
1218            - openerp-client <unknown> (embed)
1219            NOTE: embeds msgfmt.py script
1220            - rapidsvn <unknown> (embed)
1221            NOTE: embeds msgfmt.py script
1222            - wammu <unknown> (embed)
1223            NOTE: embeds msgfmt.py script
1224            - gaphor <unknown> (embed)
1225            NOTE: embeds msgfmt.py script
1226            - pida <unknown> (embed)
1227            NOTE: embeds msgfmt.py script
1228            - python-formencode <unknown> (embed)
1229            NOTE: embeds msgfmt.py script
1230            - duplicity <unfixed> (embed)
1231            NOTE: embeds stdlib module: urlparse, tarfile
1232            - pygophered <unfixed> (embed)
1233            NOTE: embeds stdlib module: zipfile
1234    
1235    argparse
1236            - twill <unfixed> (embed; bug #555347)
1237            - ipython <unfixed> (embed; bug #555348)
1238    
1239    coherence
1240            - elisa <unfixed> (embed; bug #555335)
1241    
1242    simpletal
1243            - plastex <unfixed> (embed; bug #555371)
1244    
1245    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1246            - postr <unfixed> (embed)
1247            - elisa <unfixed> (embed)
1248    
1249    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1250            - apertium-tolk <unfixed> (embed)
1251            - ipython <unfixed> (embed)
1252            - virtaal <unfixed> (embed)
1253    
1254    distribute
1255            - setuptools <removed> (old-version)
1256    
1257    rails
1258            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1259            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1260            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1261            - thin <unfixed> (embed) [./spec/rails_app/*]
1262            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1263            NOTE: be dangerous if developers are naively basing their code off of the examples
1264            NOTE: prototype.js is among the example files
1265    
1266    lucene2 (prototype.js is among the embeds in the following)
1267            - lucene <unfixed> (old-version)
1268            - pylucene <unfixed> (embed)
1269            - libpdfbox-java <unfixed> (embed)
1270            - libfontbox-java <unfixed> (embed)
1271            - libjempbox-java <unfixed> (embed)
1272            - solr <unfixed> (embed)
1273    
1274    unicode-data
1275            - syslinux <unfixed> (embed)
1276            - camomile <unfixed> (embed)
1277            - fribidi <unfixed> (embed)
1278            - m17n-db <unfixed> (embed)
1279            - sbcl <unfixed> (embed)
1280            - heimdal <unfixed> (embed)
1281            - icu <unfixed> (embed)
1282            - icu4j <unfixed> (embed)
1283            - krb5 <unfixed> (embed)
1284            - moodle <unfixed> (embed)
1285            - openldap <unfixed> (embed)
1286            - pike7.6 <unfixed> (embed)
1287            - samba <unfixed> (embed)
1288            - samba4 <unfixed> (embed)
1289            - cmucl <unfixed> (embed)
1290            - typo3-src <unfixed> (embed)
1291            - mauve <unfixed> (embed)
1292            - texlive-bin <unfixed> (embed)
1293            - ypsilon <unfixed> (embed)
1294            - jeuclid <unfixed> (embed)
1295            - charmap.app <unfixed> (embed)
1296            - clisp <unfixed> (embed)
1297            - gnulib <unfixed> (embed)
1298            - opensrs-client <unfixed> (embed)
1299            - saxonb <unfixed> (embed)
1300            - rails <unfixed> (embed)
1301    
1302    feedparser
1303            - rawdog <unfixed> (embed; bug #383422)
1304            - miro <unfixed> (embed; bug #555351)
1305            - calibre <unfixed> (embed; bug #555352)
1306            - freevo <unfixed> (embed; bug #555353)
1307            - pida <unfixed> (embed; bug #555354)
1308            - planet-venus <unfixed> (embed; bug #555355)
1309            - plone3 <unfixed> (embed; bug #555356)
1310            - exaile 0.2.14+debian-1 (embed)
1311            - screenlets 0.1.2-3 (embed)
1312            NOTE: included twice
1313    
1314    agg:
1315            - matplotlib <unfixed> (embed: bug #377271)
1316            - contextfree <unfixed> (embed)
1317            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1318            - exactimage <unfixed> (embed)
1319            - python-enable <unfixed> (embed)
1320            - mapnik 0.5.1-3 (embed)
1321            NOTE: links statically to agg, but shared library is not available (bug #377271)
1322    
1323    vtk
1324            - paraview <unfixable> (embed; bug #495426)
1325    
1326    txt2tags
1327            - rednotebook <unfixed> (embed)
1328    
1329    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1330            - gajim <unfixed> (embed)
1331            - emesene <unfixed> (embed)
1332            - convirt <unfixed> (embed)
1333            - pida <unfixed> (embed)
1334            - rednotebook <unfixed> (embed)
1335    
1336    horde3 (prototype.js is among the embeds in the following)
1337            - mnemo2 <unfixed> (embed)
1338            - nag2 <unfixed> (embed)
1339    
1340  NetXX:  cimg
1341  monotone          - gmic <itp> (embed)
1342    
1343  libgc:  mootools
1344  mono          - gmic <itp> (embed)
1345    
1346  lzma:  openldap
1347  p7zip          - openldap2.3 <removed> (old-version)
1348    
 lzo:  
1349  grub2  grub2
1350            - grub <unfixed> (old-version)
1351    
1352  pax code:  gnupginterface
1353  tar          - duplicity <unfixed> (embed)
 cpio  
   
 t1lib:  
 tetex-bin  
 texlive-bin  
   

Legend:
Removed from v.7487  
changed lines
  Added in v.13290

  ViewVC Help
Powered by ViewVC 1.1.5