/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 8075 by stef-guest, Mon Feb 4 22:41:34 2008 UTC revision 13420 by gilbert-guest, Wed Dec 2 03:42:40 2009 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>, <itp> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embedding a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and thus might share parts of the source code)        fork (the package is not just embedding code but it is a fork and
20                thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24  The srcpkg might be some string to identify the code if there is no specific source package.  The srcpkg might be some string to identify the code if there is no
25    specific source package.
26    
27  Everything up to the next line is ignored  Everything up to the next line is ignored.
28  ---BEGIN  ---BEGIN
29  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
31          - pdftohtml <unknown>          - pdftohtml <unknown>
32          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
33          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
34          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
35          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
37          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
38          NOTE: links to poppler          NOTE: links to poppler
39          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
40          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
41          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
42          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
43          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
45          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50  ppmd  ppmd
51          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59    
60    peercast
61            - gnome-peercast <removed> (embed)
62            [etch] - gnome-peercast <unfixed> (embed)
63    
64  silc-toolkit  silc-toolkit
65          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
66    
67    icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71  dietlibc  dietlibc
72          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
73    
74    libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78  libiax  libiax
79          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
80    
81    spandsp
82            - iaxmodem <unfixable> (embed; bug #548885)
83    
84  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85          - dpkg <unfixed> (embed)          - dpkg <unfixed> (embed)
# Line 67  zlib (lots of apps embed a copy, but lin Line 93  zlib (lots of apps embed a copy, but lin
93          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
94          - rpm <unknown> (embed)          - rpm <unknown> (embed)
95          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
96            - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98            - tra <unfixed>
99            - sash <unfixed>
100            - nsis <unfixed>
101            - mseide-msegui <unfixed>
102            NOTE: mseide
103            - mirrordir <unfixed>
104            - poco <unfixed>
105            - klibc <unfixed>
106            - ghostscript <unfixed>
107            - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112            - perl <unfixed>
113            - paraview <unfixed>
114            - gcvs <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125            - gamera 3.2.3-1 (embed)
126            - python2.4 <unfixed> (embed; bug #553403)
127            - python2.5 <unfixed> (embed; bug #553403)
128    
129    dulwich
130            - hg-git 0.1.0-1 (embed; bug #541996)
131    
132    libvigraimpex
133            - hugin <unfixed> (embed; bug #542259)
134            - enblend-enfuse <unfixed> (embed; bug #542258)
135            - gamera 3.2.3-1 (embed)
136    
137  libbz2  libbz2
138          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
139    
140  ekg  libgadu
141          - centericq <unfixed> (embed)          - centericq <unfixed> (embed)
142          - gaim <unfixed> (embed)          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144          - kopete 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
145          - kadu <unfixed> (embed)          NOTE: from kdenetwork: kopete
146          - gadu <unfixed> (embed)          - ekg 1:1.8~rc0-1 (embed)
147          NOTE: g/kadu not packaged in Debian yet          - kadu 0.6.0.2-3 (embed; bug #504430)
148            - gadu <itp> (embed)
149    
150  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
151          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
152          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
153          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
154          - phpwiki (embed)          - phpwiki <unfixed> (embed)
155          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
156          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157    
# Line 92  shtool (affects build-time only) Line 159  shtool (affects build-time only)
159          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
160          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
161    
162  mozilla source code  iceape
163          - mozilla-firefox <unfixed> (embed)          - iceweasel <unfixed> (fork)
164          - mozilla-thunderbird          - icedove <unfixed> (fork)
165          - firefox <removed>          - xulrunner <unfixed> (fork)
166          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
167          - thunderbird <removed>          - galeon <unfixed> (fork)
168          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser <unfixed> (fork)
169          - iceweasel <unfixed> (embed)          - conkeror <unfixed> (fork)
170          - iceape <unfixed> (embed)          - kazehakase <unfixed> (fork)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
171    
172  xli  xli
173          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
174    
175  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
176          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
177          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed)
         NOTE: in libxpm  
178    
179  kerberized apps with BSD origin  kerberized apps with BSD origin
180          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
181          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
182          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
183    
184  grip (which pkg is the origin?)  grip (which pkg is the origin?)
185          - libcdaudio          - libcdaudio <unfixed>
186          - grip          - grip <unfixed>
187          - gnome-vfs          - gnome-vfs <unfixed>
188          TODO: check vfs2 as well          TODO: check vfs2 as well
189    
190  fudforum  fudforum
191          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
192          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
193          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
194    
195    libbsd
196            - rdate 1:1.2-3 (embed)
197            - atheme-services <unfixed>
198            - libbsd-arc4random-perl <unfixed>
199            - isakmpd <unfixed>
200    
201  cvs  cvs
202          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
203          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
204    
205  pcre  pcre3
         - python* <unfixed> (embed)  
206          - php4 <unknown> (embed)          - php4 <unknown> (embed)
207          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
208          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
209            NOTE: libgoffice-*
210          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
211          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
212          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
213          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
214          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
215          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
216          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
217          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
218          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
219          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
220            - tin 980117-1 (embed)
221            - kazehakase 0.5.2-1
222            - webkit 1.0.1-1 (embed)
223            - qt4-x11 <unfixed> (embed)
224            NOTE: embedded via webkit copy
225            - erlang <unfixed> (embed)
226    
227  tiff  tiff
228          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
229          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
230    
231  uudeview  uudeview
232          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
233            - pan <unfixed> (embed)
234    
235  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
236          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
237          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
238          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
239    
240  util-linux/mount  util-linux/mount
241          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
242          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
243    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
244  sylpheed  sylpheed
245          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
246    
# Line 184  phpldapadmin Line 255  phpldapadmin
255  chmlib  chmlib
256          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
257    
258  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
259          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
260          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
261          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
262          - vlc <unfixed> (static)          - smilutils 0.3.0-10
263          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
264          - motion <unfixed> (static)          - motion 3.1.19-1
265          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
266          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed> (static)
         - xmovie <unfixed>  
267          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
268            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
269    
270    faad2
271            - mplayer 1.0~rc2-20 (embed)
272            - avifile <unfixed> (embed; bug #538750)
273            - ffmpeg-debian <removed> (old-version)
274    
275  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
276          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
277            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
278            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
279    
280  libdts  libdts
281          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 214  libmpeg2 Line 291  libmpeg2
291          - mpeg2dec <unfixed> (embed)          - mpeg2dec <unfixed> (embed)
292          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
293    
294  curl  libntlm
295          - wget <unfixed> (embed)          - wget <unfixed> (fork; bug #550436)
296          NOTE: code for NTLM authentication          - curl <unfixed> (fork; bug #550437)
297            - cntlm <unfixed> (fork; bug #550438)
298    
299  uw-imap  uw-imap
300          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 225  uw-imap Line 303  uw-imap
303  imagemagick  imagemagick
304          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
305    
306    python-urlgrabber
307            - mercurial <unfixed> (embed; bug #531062)
308            - w3af <unfixed> (embed; bug #555372)
309            [experimental] - harvestman <unfixed> (embed; bug #555373)
310    
311    beautifulsoup
312            - python-mechanize <unfixed> (embed; bug #555349)
313            - zope2.11 <unfixed> (embed; bug #555350)
314            - twill <unknown> (embed)
315    
316  halibut  halibut
317          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
318    
319  libghttp  libghttp
320          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
321    
322  libsndfile  libsndfile
323          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
324    
325  glibmm2.4  glibmm2.4
326          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
327    
328  libgnomecanvasmm2.6  libgnomecanvasmm2.6
329          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
330    
331  libsigc++-2.0  libsigc++-2.0
332          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
333    
334  soundtouch  soundtouch
335          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
336    
337  libmms  libmms
338          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
339          - mimms <unfixed> (embed)          - mimms <unfixed> (embed)
340    
341  fckeditor  fckeditor
342          - knowledgeroot <unfixed> (embed; bug #461555)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
343          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
344          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
345          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
346            - request-tracker3.8 <unfixed> (embed)
347    
348  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
349          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
350    
351  libphp-phpmailer  libphp-phpmailer
352          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
353            - mahara <unfixed> (embed)
354            - symfony <unfixed> (embed)
355            [etch] - phpgroupware <unfixed> (embed)
356            NOTE: phpgroupware-felamimail is only in etch
357            - egroupware <unfixed> (embed; bug #504283)
358            - glpi <unfixed>
359    
360  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
361          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
362    
363  bennu (not packaged in Debian)  giflib
364          - moodle <unfixed> (embed)          - wine <unfixed> (embed; bug #466181)
365    
366  smarty:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
367          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
368    
369    smarty
370            - moodle 1.8.2-2 (embed; bug #471158)
371            - gallery2 2.2.5-2 (embed; bug #471160)
372            - mahara 0.9.2-2 (embed; bug #471201)
373            - gosa 2.4beta1-1 (embed; bug #471200)
374    
375  TinyMCE  TinyMCE
376          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
377          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
378          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
379          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
380    
381  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
382          - scite <unfixed> (embed)          - scite <unfixed> (embed)
383          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
384          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
385          - geany <unfixed> (embed)          - geany <unfixed> (fork)
386            - anjuta <unfixed> (embed)
387    
388  libphp-adodb  libphp-adodb
389          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
390          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
391          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
392          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
393          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
394          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
395            - torrentflux 2.0beta1-2 (embed)
396          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
397          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
398          - cacti <unknown> (embed)          - cacti <unknown> (embed)
399          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
400          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
401            - gforge 4.7~rc2-6 (embed)
402            - mahara <unfixed> (embed)
403    
404  gzip  gzip
405          - linux-kernel <unfixed> (embed)          - linux-kernel <unfixed> (embed)
# Line 305  gzip Line 409  gzip
409          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
410    
411  neon  neon
412          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
413          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
414          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
415            - litmus <removed> (embed; #395875)
416          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
417          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.3-5 (embed; bug #395876)
418          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
419          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
420    
# Line 328  tinyxml (not packaged in Debian) Line 433  tinyxml (not packaged in Debian)
433  gv  gv
434          - evince <unfixed> (embed)          - evince <unfixed> (embed)
435          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
436          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
437    
438  libXbae  libXbae
439          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
440          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
441    
442    libgtkhtml
443            - claws-mail-extra-plugins <unfixed> (fork)
444    
445  libXaw  libXaw
446          [etch] - libpawlib2-lesstif          - paw <removed> (embed)
447          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
448          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
449    
450  libgd2  libgd2
451          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
452          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
453            - wml <unfixed> (embed)
454            - libwmf <unfixed> (embed)
455            NOTE: derived from gd 1.6.3
456    
457  rar  rar
458          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 356  mplayer (DirectMedia Object loader) Line 466  mplayer (DirectMedia Object loader)
466          NOTE: src/libw32dll/          NOTE: src/libw32dll/
467          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
468          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
469            - mplayer 1.0~rc2-20 (embed)
470    
471  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
472          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 364  fsplib (http://sourceforge.net/projects/ Line 475  fsplib (http://sourceforge.net/projects/
475          - gftp <unfixed> (embed)          - gftp <unfixed> (embed)
476          NOTE: lib/fsplib version 0.3          NOTE: lib/fsplib version 0.3
477    
478    sprng
479            - tree-puzzle <unfixed> (embed)
480    
481  librpcsecgss  librpcsecgss
482          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
483    
# Line 371  jasper Line 485  jasper
485          - ghostscript <unfixed> (embed)          - ghostscript <unfixed> (embed)
486          - gs-gpl <unfixed> (embed)          - gs-gpl <unfixed> (embed)
487    
488    libiris
489            - psi <unfixed> (embed)
490            - kdenetwork <unfixed> (embed)
491            NOTE: kopete embeds libiris but links dynamically to libidn
492            - kdegames <unfixed> (embed)
493            NOTE: ksirk/kde4
494    
495  libidn  libidn
496          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
497            - psi <unfixed> (embed)
498            NOTE: psi embeds libiris which embeds libidn
499            - kdegames <unfixed> (embed)
500            NOTE: kdegames/kde4 embeds libiris which embeds libidn
501    
502  liblua  liblua
503          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
504            - nmap 5.00-1 (embed; bug #527997)
505            [lenny] - nmap <unfixed> (embed; bug #527997)
506            - ocropus <unfixed> (embed)
507    
508  libbotan  libbotan
509          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
510    
511  NetXX  NetXX
512          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
513    
514  libgc  libgc
515          - mono <unfixed> (embed)          - mono <unfixed> (embed)
516    
517  lzma  lzma
518          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
519            - xz-utils <unfixed> (fork)
520    
521  lzo  lzo
522          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
# Line 410  guichan Line 539  guichan
539  tolua  tolua
540          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
541          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
542            - ocropus <unfixed> (embed)
543            - freeciv <unfixed> (embed)
544    
545  asio-dev  asio-dev
546          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
547    
548  xine-lib  xine-lib
549          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 425  netpbm Line 554  netpbm
554          - tcl8.4 <unfixed> (embed)          - tcl8.4 <unfixed> (embed)
555          - tcl8.5 <unfixed> (embed)          - tcl8.5 <unfixed> (embed)
556          NOTE: generic/tkImgGIF.c          NOTE: generic/tkImgGIF.c
557    
558    tk8.5
559            - tk8.0 <removed> (old-version)
560            - tk8.3 <unfixed> (old-version)
561            - tk8.4 <unfixed> (old-version)
562            - perl-tk <unfixable> (fork)
563    
564    samba
565            - mc 2:4.6.2~git20080311-1 (embed)
566            NOTE: maintainer is aware of this, currently searching a solution
567    
568    plib1.8.4c2
569            - boson <unfixed> (fork)
570            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
571    
572    fribidi
573            - quesoglc <unfixed> (embed)
574            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
575    
576    glew
577            - quesoglc <unfixed> (embed; bug #489341)
578            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
579    
580    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
581            - transcend <unfixed> (embed)
582            - cultivation <unfixed> (embed)
583            - passage <unfixed> (embed)
584            - gravitation <unfixed> (embed)
585    
586    tar
587            - libarchive <unfixed> (embed)
588            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
589    
590    cpio
591            - libarchive <unfixed> (embed)
592            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
593    
594    webkit
595            - qt4-x11 <unfixed> (embed)
596    
597    ftgl
598            - blender 2.46+dfsg-1 (embed)
599    
600    wv
601            - abiword <unfixed>
602    
603    qemu
604            - kvm <unfixed> (embed; bug #543159)
605            - xen-3 <unfixed> (embed)
606            - xen-unstable <unfixed> (embed)
607    
608    vgabios
609            - kvm <unfixed> (embed; bug #489442)
610    
611    bochs
612            - kvm <unfixed> (embed; bug #489442)
613    
614    speex
615            - vorbis-tools <unfixed> (embed)
616            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
617            - gst-plugins-good0.10 <unfixed> (embed)
618            - xine-lib <unfixed> (embed)
619            - libfishsound <unfixed> (embed)
620            - libannodex <unfixed> (embed)
621            - vlc <unfixed> (embed)
622            - xmms-speex <unfixed> (embed)
623            - libsdl-sound1.2 <unfixed> (embed)
624            - sweep <unfixed> (embed)
625    
626    libreadline
627            - magic <itp> (old-version)
628    
629    opcode
630            - ode <unfixed> (embed)
631            NOTE: opcode is not a package in debian, it is just embedded
632            NOTE: http://www.codercorner.com/Opcode.htm
633    
634    gimpact
635            - ode <unfixed> (embed)
636            NOTE: gimpact is not a package in debian, it is just embedded
637            NOTE: http://gimpact.sf.net
638    
639    mochikit
640            - mahara <unfixed> (embed)
641            NOTE: they require extra patches, still unmerged upstream
642            - ntop <unfixed> (embed)
643            - coherence 0.6.2-1 (embed)
644            - paste <unfixed> (embed)
645            - turbogears <unfixed> (embed)
646            - plone3 <unfixed> (embed)
647            - xulrunner <unfixed> (embed)
648            - libjifty-plugin-chart-perl <unfixed> (embed)
649            - sabnzbdplus <unfixed> (embed)
650            - tgmochikit <unfixed> (embed)
651    
652    prototypejs
653            - netbeans-ide 6.0.1+dfsg-2 (embed)
654            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
655            - webcit <unfixed> (embed; bug #555219)
656            - asterisk 1:1.6.2.0~rc3-1 (embed)
657            - libjson-ruby 1.1.4-1 (embed; bug #555224)
658            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
659            - horde3 <unfixed> (embed)
660            - knowledgeroot <unfixed> (embed; bug #555230)
661            - mediatomb <unfixed> (embed; bug #555233)
662            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
663            - ebug-http <unfixed> (embed; bug #555236)
664            - phpgedview <removed> (embed)
665            - poker-network <unfixed> (embed; bug #555238)
666            - rails 2.1.0-6 (embed)
667            - wordpress 2.5.0-2 (embed; bug #555243)
668            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
669            TODO: search through all of the other zope packages
670            - ampache 3.4.1-2 (embed)
671            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
672            - hobix 0.5~svn20070319-4 (embed; bug #555247)
673            - zabbix 1.6.6-4 (embed; bug #555250)
674            - chora2 <unfixed> (embed; bug #555253)
675            - gollem <unfixed> (embed; bug # 555254)
676            - jscropperui 1.2.1-1 (embed; bug #555257)
677            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
678            - ingo1 <unfixed> (embed; bug #555261)
679            - kronolith2 <unfixed> (embed; bug #555262)
680            - activeldap <unfixed> (embed)
681            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
682            - mantis <unfixed> (embed; bug #555265)
683            - otrs2 2.3.4-6 (embed; bug #555267)
684            - webcalendar <unfixed> (embed; bug #555269)
685            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
686            - jifty 0.90519-1 (embed; bug #555271)
687            - jquery <unfixed> (embed; bug #555272)
688            - passenger 2.2.5debian1-1 (embed; bug #555273)
689            - plone3 <unfixed> (embed; bug #555275)
690            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
691            - libhtml-prototype-perl <unfixed> (embed; bug #538920)
692            - xulrunner <unfixed> (embed)
693            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
694    
695    gdb
696            - insight <unfixed> (embed)
697    
698    e2fsprogs
699            - ldiskfsprogs <unfixable> (fork)
700    
701    quazip (not packaged in Debian)
702            - qcake <unfixed> (embed)
703            NOTE: starting with upstream version 0.6.4
704    
705    exo
706            - pcmanfm <unfixed> (embed; bug #499677)
707            NOTE: slightly modified source code
708    
709    java
710            - openjdk-6 <unfixed>
711            - sun-java5 <unfixed>
712            - sun-java6 <unfixed>
713    
714    libphp-snoopy
715            - ampache 3.4.1-2 (embed; bug #504169)
716            - gforge 4.6.99+svn6094-2 (embed)
717            - mahara 1.0.5-2 (embed; bug #504170)
718            - pixelpost 1.7.1-5 (embed; bug #504171)
719            - mediamate 0.9.3.6-5 (embed; bug #504172)
720            - opendb <removed> (embed; bug #504173)
721            [etch] - opendb <unfixed> (embed; bug #504173)
722            - wordpress 2.5.1-9 (embed; bug #443948)
723            - moodle <unfixed> (embed; bug #507185)
724            [etch] - phpgroupware <unfixed> (embed)
725            NOTE: phpgroupware-felamimail
726            - magpierss 0.72-3 (embed; bug #431089)
727    
728    jquery
729            - zekr <unfixed> (embed)
730            - wordpress <unknown> (embed)
731            - yocto-reader <unfixed> (embed)
732            - textpattern <unfixed> (embed)
733            - genshi 0.5.1-1 (embed)
734            NOTE: compressed file under examples/ dir
735            - prewikka <unfixed> (embed)
736            - libramaze-ruby <unfixed> (embed)
737            - drupal5 <unfixed> (embed)
738            - b2evolution <unfixed> (embed)
739            - wesnoth <unfixed> (embed)
740    
741    tablesorter (jquery plugin, not packaged yet)
742            - wesnoth <unfixed> (embed)
743    
744    kses
745            - wordpress <unfixed> (embed; bug #504242)
746            NOTE: their copy has all methods renamed to wp_<foo>
747            NOTE: kses isn't in Debian, RFP: #504240
748            - moodle <unfixed> (embed; bug #507185)
749            - egroupware <unfixed> (embed)
750    
751    magpierss
752            - wordpress <unfixed> (embed; bug #504242)
753            - moodle <unfixed>
754    
755    php-gettext
756            - wordpress 2.8.4-1 (embed; bug #504242)
757    
758    libphp-ixr (name may change, it is the Incutio XML-RPC)
759            - wordpress <unfixed> (embed; bug #504242)
760            NOTE: libphp-ixr isn't in Debian, RFP: #504236
761            - dokuwiki <unfixed> (embed)
762            - textpattern <unfixed> (embed)
763    
764    libphp-cas
765            - glpi <unfixed> (embed)
766            - moodle <unfixed> (embed; bug #505984)
767    
768    scriptaculous (prototype.js is among the embeds in the following)
769            - glpi <unfixed> (embed)
770            - libaws <unfixed> (embed; bug #555222)
771            - op-panel <unfixed> (embed)
772            - symfony <unfixed> (embed)
773            NOTE: maintainer says there are extra incompatible changes required
774            - pixelpost 1.7.1-6 (embed)
775            - webhelpers <unfixed> (embed)
776            - qwik <unfixed> (embed; bug #555241)
777            - smokeping <unfixed> (embed)
778            - turba2 <unfixed> (embed)
779            - typo3-src 4.2.3-1 (embed)
780            - request-tracker3.6 <unfixed> (embed)
781            - request-tracker3.8 <unfixed> (embed)
782            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
783            - wordpress 2.5.0-2 (embed)
784    
785    libmarkdown-php
786            - moodle <unfixed> (embed; bug #507185)
787            - pixelpost 1.7.1-6 (embed)
788    
789    php-openid
790            - wordpress-openid <itp> (embed)
791    
792    geshi
793            - dokuwiki 0.0.20080505-3.1 (embed)
794            - pgfouine 1.0-1.1 (embed)
795            - websvn 2.1.0-1 (embed)
796    
797    webcalendar
798            - gforge 4.7~rc2-6 (embed; bug #504758)
799    
800    libical
801            - kdepim <unfixed> (fork)
802            - kdepimlibs <unfixed> (fork)
803            NOTE: fixed in KDE4 post 4.1.x series
804            - claws-mail-extra-plugins <unfixed> (fork)
805    
806    libltdl3
807            - kdelibs <unfixed> (embed)
808            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
809            - synfig <unfixed> (embed)
810    
811    harfbuzz
812            - qt4-x11 <unfixed> (embed)
813    
814    libzip
815            - php5 <unfixed> (fork)
816            - odt2txt <unfixed> (embed; bug #523808)
817    
818    json.php (not packaged; should be replaced with php's built-in functions)
819            - moodle <unfixed>
820            - yui <unfixed>
821            - gallery2 <unfixed>
822            - dokuwiki <unfixed>
823            - typo3-src <unfixed>
824    
825    php-fpdf
826            - tcpdf <itp> (fork)
827            - moodle <unfixed>
828            - phpwiki <unfixed>
829            - egroupware <unfixed>
830            - ldap-account-manager <unfixed> (fork)
831    
832    tcpdf (itp: #495985)
833            - moodle <unfixed>
834            - phpmyadmin <unfixed>
835    
836    typo3
837            - moodle <unfixed>
838    
839    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
840            - moodle <unfixed>
841            - gosa <unfixed>
842    
843    php-ole (itp: #487558)
844            - moodle <unfixed>
845    
846    pieforms (http://www.catalyst.net.nz)
847            - mahara <unfixed>
848    
849    savant2 (http://phpsavant.com)
850            - egroupware <unfixed>
851    
852    rssparser (http://nwow.org)
853            - egroupware <unfixed>
854            - phpgroupware <unfixed>
855    
856    lcms
857            - openjdk-6 <unfixed> (fork)
858    
859    libphp-phplayersmenu
860            - diogenes <unfixed>
861            - phpldapadmin <unfixed>
862    
863    libphp-pclzip
864            - docvert <unfixed>
865            - moodle <unfixed>
866            - egroupware <unfixed>
867    
868    libphp-simplepie
869            - dokuwiki <unfixed>
870    
871    libphp-jpgraph
872            - egroupware <unfixed>
873    
874    php-simpletest
875            - moodle <unfixed>
876    
877    libpng
878            - iceweasel <not-affected> (uses xulrunner)
879            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
880            - iceape 1.0.13~pre080614i-0etch1 (embed)
881            - xulrunner 1.9.0.13-1 (embed)
882            [lenny] - xulrunner 1.9.0.11-0lenny1
883            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
884            - gamera 3.2.3-1 (embed)
885    
886    irssi
887            - silc-client <unfixed> (embed)
888            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
889    
890    extc
891            - mtasc <unfixed> (embed)
892            - haxe <unfixed> (embed)
893    
894    swflib
895            - mtasc <unfixed> (embed)
896            - haxe <unfixed> (embed)
897    
898    libitext-java
899            - bouncycastle 2.1.4-1 (embed)
900    
901    python-ply
902            - pyke <unfixed> (embed; bug #555363)
903            - pywbem <unfixed> (embed; bug #555364)
904            - sepolgen <unfixed> (embed; bug #555365)
905            - zope-textindexng3 <unknown> (embed)
906            - iceweasel <unknown> (embed)
907            - xulrunner <unknown> (embed)
908            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
909    
910    libdumbnet (libdnet upstream)
911            - nmap <unfixed> (fork)
912    
913    gcc-4.4
914            - gcc-mingw32 <unfixed> (embed)
915    
916    camlimages
917            - advi <unfixed> (static; bug #550441)
918    
919    memcached
920            - memcachedb <unfixed> (embed)
921    
922    yajl
923            - argyll <unfixed> (embed; bug #544223)
924            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
925    
926    nusoap
927            - gforge 4.8.2-1 (embed)
928    
929    libept
930            - adept <unfixed> (embed; bug #540649)
931    
932    libvorbis
933            - iceweasel <not-affected> (uses xulrunner)
934            - xulrunner <unfixed> (embed; bug #540959)
935            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
936            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
937    
938    cairo
939            - iceweasel <not-affected> (uses xulrunner)
940            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
941    
942    liboggz
943            - iceweasel <not-affected> (uses xulrunner)
944            - xulrunner <unfixed> (embed; bug #540949)
945            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
946            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
947    
948    
949    liboggplay
950            - iceweasel <not-affected> (uses xulrunner)
951            - xulrunner <unfixed> (embed; bug #540949)
952            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
953            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
954    
955    php-net-dnsbl
956            - serendipity <unfixed> (embed)
957    
958    php-onyx-rss
959            - serendipity <unfixed> (embed)
960    
961    php-text-wiki
962            - serendipity <unfixed> (embed)
963    
964    php-xml-rpc
965            - serendipity <unfixed> (embed)
966    
967    polarssl (does not have a shared library)
968            - pdkim <itp> (embed; bug #543150)
969            - xyssl <unfixed> (old-version)
970    
971    pidgin
972            - gaim <removed> (old-version)
973    
974    icu
975            - webkit 1.0.1-1 (embed; bug #547214)
976            - texlive-bin <unfixed> (fork)
977            NOTE: texlive upstream working with icu upstream to merge their changes
978    
979    cyrus-imapd-2.2
980            - kolab-cyrus-imapd <unfixed> (fork)
981            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
982    
983    python-cxx-dev
984            - freecad <unfixed> (embed; bug #547936)
985    
986    libzipios++-dev
987            - freecad <unfixed> (embed; bug #547941)
988    
989    linux-2.6
990            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
991            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
992            - kernel-source-2.6.8 <removed> (old-version)
993            - kernel-source-2.4.27 <removed> (old-version)
994            - kernel-source-2.4.24 <removed> (old-version)
995            - kernel-source-2.2.25 <removed> (old-version)
996            - kernel-source-2.2.20 <removed> (old-version)
997    
998    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
999            - kvm <unfixed> (embed) [./libfdt/*]
1000    
1001    qweb (not packaged)
1002            - ajaxterm <unfixed>
1003    
1004    opensaml2
1005            - opensaml <removed> (old-version)
1006    
1007    shibboleth-sp2
1008            - shibboleth-sp <removed> (old-version)
1009    
1010    tuxonice-userui
1011            - suspend2-userui <removed> (old-version)
1012    
1013    expat
1014            - w3c-libwww <removed> (embed; bug #551941)
1015            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1016            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1017            - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1018            - python2.4 <unfixed> (embed; bug #553403)
1019            - wxwindows2.4 <removed> (embed)
1020            - wxwidgets2.6 <unfixed> (embed)
1021            - wxwidgets2.8 <unfixed> (embed)
1022            - celementtree <unfixed> (embed)
1023            - audacity <unfixed> (embed)
1024            - matanza <unfixed> (embed)
1025            - tdom <unfixed> (embed)
1026            - udunits <unfixed> (embed)
1027            - apr-util 1.2 (embed)
1028            - ayttm <unfixed> (embed)
1029            - cableswig <unfixed> (embed)
1030            - cadaver <unfixed> (embed)
1031            - cmake <unfixed> (embed)
1032            - coin3 <unfixed> (embed)
1033            - gdcm <unfixed> (embed)
1034            - ghostscript <unfixed> (embed)
1035            - grmonitor <unfixed> (embed)
1036            - iceape <unfixed> (embed)
1037            - insighttoolkit <unfixed> (embed)
1038            - libparagui1.1 <unfixed> (embed)
1039            - paraview <unfixed> (embed)
1040            - poco <unfixed> (embed)
1041            - simgear <unfixed> (embed)
1042            - sitecopy <unfixed> (embed)
1043            - smart 1.0-1 (embed)
1044            [etch] - smart <unfixed> (embed)
1045            - swish-e <unfixed> (embed)
1046            - tla <unfixed> (embed)
1047            - vtk <unfixed> (embed)
1048            - wbxml2 <unfixed> (embed)
1049            - xmlrpc-c <unfixed> (embed)
1050            - iceweasel <unfixed> (embed)
1051            - kompozer <unfixed> (embed)
1052            - vxl <unfixed> (embed)
1053            - xulrunner <unfixed> (embed)
1054            - apache2 2.2 (embed)
1055            - texlive-bin <unfixed> (embed) [included twice]
1056            - vnc4 <unfixed> (embed)
1057            - xotcl <unfixed> (embed)
1058    
1059    xerces-c
1060            - xerces-c2 <unfixed> (old-version)
1061            - xerces27 <removed> (old-version)
1062    
1063    md5 (RSA's version; not the gnu version provided by coreutils)
1064            - w3c-libwww <removed> (embed; bug #551942)
1065            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1066    
1067    enet
1068            - sauerbraten <unfixed> (embed; #497194)
1069    
1070    eglibc
1071            - glibc <removed> (old-version)
1072    
1073    galib
1074            - gamera 3.2.3-1 (embed)
1075    
1076    configobj
1077            - bzr <unfixed> (embed; bug #555336)
1078            - elisa <unfixed> (embed; bug #555337)
1079            - gaupol <unfixed> (embed; bug #555338)
1080            - ipython <unfixed> (embed; bug #555339)
1081            - pida <unfixed> (embed; bug #555340)
1082            - psychopy <unfixed> (embed; bug #555341)
1083            - rest2web <unfixed> (embed; bug #555342)
1084            - auth2db <unknown> (embed)
1085            - dynagen <unknown> (embed)
1086            - iceweasel <unknown> (embed)
1087            - sabnzbdplus <unknown> (embed)
1088            - xulrunner <unknown> (embed)
1089            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1090    
1091    python-clientform
1092            - bibus <unfixed> (embed; bug #555332)
1093            - zope2.10 <unfixed> (embed; bug #555333)
1094            - zope2.11 <unfixed> (embed; bug #555334)
1095            - python-mechanize <unknown> (embed)
1096            - twill <unknown> (embed)
1097    
1098    python-mechanize
1099            - zope2.10 <unfixed> (embed; bug #555337)
1100            - zope2.11 <unfixed> (embed; bug #555338)
1101            - twill <unknown> (embed; bug #555339)
1102    
1103    pexpect
1104            - duplicity 0.6.06-1 (embed; bug #555361)
1105            - hplip <unfixed> (embed; bug #555362)
1106            - smart <unfixed> (embed; bug #555363)
1107    
1108    pyparsing
1109            - bauble <unfixed> (embed; bug #555366)
1110            - boa-constructor 0.6.1-8 (embed; bug #555367)
1111            - calibre <unfixed> (embed; bug #555368)
1112            - matplotlib <unfixed> (embed; bug #531024)
1113            - zhpy <unfixed> (embed; bug #555370)
1114            - polybori <unknown> (embed)
1115            - python-whoosh <unknown> (embed)
1116            - twill <unknown> (embed)
1117            - zope-textindexng3 <unknown> (embed)
1118    
1119    python-pysqlite2
1120            - python2.4 <unfixed> (embed; bug #553403)
1121            - python2.5 <unfixed> (embed; bug #553403)
1122    
1123    celementtree
1124            - python2.5 <unfixed> (embed)
1125            - smart 1.0-1 (embed)
1126            [etch] - smart <unfixed> (embed)
1127    
1128    elementtree
1129            - python2.5 <unfixed> (embed)
1130            - bzr <unfixed> (embed; bug #555343)
1131            - gedit 2.28.2-1 (embed; bug #555344)
1132            - smart 1.0-1 (embed)
1133            [etch] - smart <unfixed> (embed)
1134            - solfege <unfixed> (embed; bug #555345)
1135            - w3af <unfixed> (embed; bug #555346)
1136            - python-qt4 <unknown> (embed)
1137            - sphinx <unknown> (embed)
1138            - python-nltk <itp> (embed)
1139    
1140    python2.5
1141            - python2.4 <unfixed> (old-version)
1142            - jython <unfixed> (embed)
1143            NOTE: embeds many stdlib modules
1144            - python-django <unfixed> (embed; bug #555419)
1145            NOTE: embeds stdlib modules: doctest, decimal
1146            - gamera 3.2.3-1 (embed)
1147            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1148            - boa-constructor <unfixed> (embed; bug #555426)
1149            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1150            - nicotine <unfixed> (embed; bug #555427)
1151            NOTE: embeds stdlib modules: ConfigParser
1152            - museek+ <unfixed> (embed; bug #555428)
1153            NOTE: embeds stdlib modules: ConfigParser
1154            - vegastrike-data <unfixed> (embed)
1155            NOTE: embeds many stdlib modules
1156            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1157            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1158            - config-manager <unfixed> (embed; bug #555423)
1159            NOTE: embeds stdlib modules: optparse
1160            - jhbuild 2.28.0-1 (embed; bug #555421)
1161            NOTE: embeds stdlib modules: optparse, subprocess
1162            - smart <unfixed> (embed; bug #555432)
1163            NOTE: embeds stdlib modules: optparse
1164            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1165            NOTE: embeds stdlib modules: doctest
1166            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1167            NOTE: embeds stdlib modules: doctest
1168            - distribute <unfixed> (embed)
1169            NOTE: embeds stdlib modules: doctest
1170            - python-setuptools <unfixed> (embed; bug #555435)
1171            NOTE: embeds stdlib modules: doctest
1172            - zope.testing <unfixed> (embed; bug #555436)
1173            NOTE: embeds stdlib modules: doctest
1174            - translate-toolkit <unfixed> (embed; bug #555422)
1175            NOTE: embeds stdlib modules: textwrap, contextlib
1176            - libtpclient-py <unfixed> (embed; bug #555424)
1177            NOTE: embeds stdlib modules: subprocess
1178            - grass <unfixed> (embed; bug #555425)
1179            NOTE: embeds stdlib modules: subprocess
1180            - coherence <unfixed> (embed; bug #555429)
1181            NOTE: embeds stdlib modules: uuid
1182            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1183            NOTE: embeds stdlib modules: uuid
1184            - setroubleshoot <unfixed> (embed; bug #555431)
1185            NOTE: embeds stdlib modules: uuid
1186            - linkchecker <unfixed> (embed; bug #555414)
1187            NOTE: embeds msgfmt.py script
1188            - imdbpy <unfixed> (embed)
1189            NOTE: embeds msgfmt.py script
1190            - kiwi <unfixed> (embed)
1191            NOTE: embeds msgfmt.py script
1192            - moin <unfixed> (embed)
1193            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1194            - plone3 <unfixed> (embed)
1195            NOTE: embeds msgfmt.py script
1196            - roundup <unfixed> (embed)
1197            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1198            - rednotebook <unfixed> (embed; bug #555415)
1199            NOTE: embeds msgfmt.py script
1200            - turbogears <unfixed> (embed)
1201            NOTE: embeds msgfmt.py script
1202            - elisa <unfixed> (embed)
1203            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1204            - calibre <unfixed> (embed)
1205            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1206            - mailman <unfixed> (embed; #555416)
1207            NOTE: embeds msgfmt.py script
1208            - python-docutils <unknown> (embed)
1209            NOTE: embeds stdlib modules: optparse, textwrap
1210            - python-imaging <unknown> (embed)
1211            NOTE: embeds stdlib modules: doctest
1212            - python-mechanize <unknown> (embed)
1213            NOTE: embeds stdlib modules: doctest
1214            - twill <unknown> (embed)
1215            NOTE: embeds stdlib modules: subprocess
1216            - zeroc-ice <unknown> (embed)
1217            NOTE: embeds stdlib modules: subprocess
1218            - wxwidgets2.8 <unknown> (embed)
1219            NOTE: embeds stdlib modules: subprocess
1220            - cycle <unknown> (embed)
1221            NOTE: embeds msgfmt.py script
1222            - deluge <unknown> (embed)
1223            NOTE: embeds msgfmt.py script
1224            - opendict <unknown> (embed)
1225            NOTE: embeds msgfmt.py script
1226            - openerp-client <unknown> (embed)
1227            NOTE: embeds msgfmt.py script
1228            - rapidsvn <unknown> (embed)
1229            NOTE: embeds msgfmt.py script
1230            - wammu <unknown> (embed)
1231            NOTE: embeds msgfmt.py script
1232            - gaphor <unknown> (embed)
1233            NOTE: embeds msgfmt.py script
1234            - pida <unknown> (embed)
1235            NOTE: embeds msgfmt.py script
1236            - python-formencode <unknown> (embed)
1237            NOTE: embeds msgfmt.py script
1238            - duplicity <unfixed> (embed)
1239            NOTE: embeds stdlib module: urlparse, tarfile
1240            - pygopherd <unfixed> (embed)
1241            NOTE: embeds stdlib module: zipfile
1242    
1243    argparse
1244            - twill <unfixed> (embed; bug #555347)
1245            - ipython <unfixed> (embed; bug #555348)
1246    
1247    coherence
1248            - elisa <unfixed> (embed; bug #555335)
1249    
1250    simpletal
1251            - plastex <unfixed> (embed; bug #555371)
1252    
1253    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1254            - postr <unfixed> (embed)
1255            - elisa <unfixed> (embed)
1256    
1257    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1258            - apertium-tolk <unfixed> (embed)
1259            - ipython <unfixed> (embed)
1260            - virtaal <unfixed> (embed)
1261    
1262    distribute
1263            - setuptools <removed> (old-version)
1264    
1265    rails
1266            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1267            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1268            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1269            - thin <unfixed> (embed) [./spec/rails_app/*]
1270            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1271            NOTE: be dangerous if developers are naively basing their code off of the examples
1272            NOTE: prototype.js is among the example files
1273    
1274    lucene2 (prototype.js is among the embeds in the following)
1275            - lucene <unfixed> (old-version)
1276            - pylucene <unfixed> (embed)
1277            - libpdfbox-java <unfixed> (embed)
1278            - libfontbox-java <unfixed> (embed)
1279            - libjempbox-java <unfixed> (embed)
1280            - solr <unfixed> (embed)
1281    
1282    unicode-data
1283            - syslinux <unfixed> (embed)
1284            - camomile <unfixed> (embed)
1285            - fribidi <unfixed> (embed)
1286            - m17n-db <unfixed> (embed)
1287            - sbcl <unfixed> (embed)
1288            - heimdal <unfixed> (embed)
1289            - icu <unfixed> (embed)
1290            - icu4j <unfixed> (embed)
1291            - krb5 <unfixed> (embed)
1292            - moodle <unfixed> (embed)
1293            - openldap <unfixed> (embed)
1294            - pike7.6 <unfixed> (embed)
1295            - samba <unfixed> (embed)
1296            - samba4 <unfixed> (embed)
1297            - cmucl <unfixed> (embed)
1298            - typo3-src <unfixed> (embed)
1299            - mauve <unfixed> (embed)
1300            - texlive-bin <unfixed> (embed)
1301            - ypsilon <unfixed> (embed)
1302            - jeuclid <unfixed> (embed)
1303            - charmap.app <unfixed> (embed)
1304            - clisp <unfixed> (embed)
1305            - gnulib <unfixed> (embed)
1306            - opensrs-client <unfixed> (embed)
1307            - saxonb <unfixed> (embed)
1308            - rails <unfixed> (embed)
1309    
1310    feedparser
1311            - rawdog <unfixed> (embed; bug #383422)
1312            - miro <unfixed> (embed; bug #555351)
1313            - calibre <unfixed> (embed; bug #555352)
1314            - freevo <unfixed> (embed; bug #555353)
1315            - pida <unfixed> (embed; bug #555354)
1316            - planet-venus <unfixed> (embed; bug #555355)
1317            - plone3 <unfixed> (embed; bug #555356)
1318            - exaile 0.2.14+debian-1 (embed)
1319            - screenlets 0.1.2-3 (embed)
1320            NOTE: included twice
1321    
1322    agg:
1323            - matplotlib <unfixed> (embed: bug #377271)
1324            - contextfree <unfixed> (embed)
1325            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1326            - exactimage <unfixed> (embed)
1327            - python-enable <unfixed> (embed)
1328            - mapnik 0.5.1-3 (embed)
1329            NOTE: links statically to agg, but shared library is not available (bug #377271)
1330    
1331    vtk
1332            - paraview <unfixable> (embed; bug #495426)
1333    
1334    txt2tags
1335            - rednotebook <unfixed> (embed)
1336    
1337    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1338            - gajim <unfixed> (embed)
1339            - emesene <unfixed> (embed)
1340            - convirt <unfixed> (embed)
1341            - pida <unfixed> (embed)
1342            - rednotebook <unfixed> (embed)
1343    
1344    horde3 (prototype.js is among the embeds in the following)
1345            - mnemo2 <unfixed> (embed)
1346            - nag2 <unfixed> (embed)
1347    
1348    cimg
1349            - gmic <itp> (embed)
1350    
1351    mootools
1352            - gmic <itp> (embed)
1353    
1354    openldap
1355            - openldap2.3 <removed> (old-version)
1356    
1357    grub2
1358            - grub <unfixed> (old-version)
1359    
1360    gnupginterface
1361            - duplicity <unfixed> (embed)
1362    
1363    python-dateutil
1364            - awn-extras-applets <unfixed> (embed)
1365            - matplotlib <unknown> (embed)
1366    
1367    cups
1368            - cupsys <removed> (old-version)
1369    
1370    yui
1371            - bcfg2 <not-affected> (present in source but not included in any binary files)
1372            - serendipity <unfixed> (embed; bug #557746)
1373            - moodle 1.8.2.dfsg-5 (embed)
1374            - jifty <unfixed> (embed; bug #557748)
1375            - webgui 7.7.26-1 (embed)
1376            - loggerhead 1.17-1 (embed)
1377    
1378    quake3 (vanilla source not packaged in debian)
1379            - openarena <unfixable> (fork)
1380    
1381    quake2 (vanilla source not packaged in debian)
1382            - alien-arena <unfixable> (fork)
1383            - warsow <unfixable> (fork)

Legend:
Removed from v.8075  
changed lines
  Added in v.13420

  ViewVC Help
Powered by ViewVC 1.1.5