/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 13358 - (show annotations) (download)
Tue Nov 24 03:50:06 2009 UTC (3 years, 6 months ago) by gilbert-guest
File size: 38061 byte(s)
- bugs submitted for kvm issues
- kernel triage
- prototypejs updates
- bugs submitted for libjs-yui issue
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy, <unfixed>, <removed>,
14 <itp>, <not-affected>, <unknown> if the version number can not
15 be determined, or <unfixable> for unavoidable cases (e.g., forks
16 that add real value)
17 sort: static (linking statically against a lib)
18 embed (embedding a copy of the library into another source package)
19 fork (the package is not just embedding code but it is a fork and
20 thus might share parts of the source code)
21 old-version (the package is an older version of essentially
22 the same code)
23
24 The srcpkg might be some string to identify the code if there is no
25 specific source package.
26
27 Everything up to the next line is ignored.
28 ---BEGIN
29 xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30 NOTE: Fixed packages link to poppler library unless otherwise noted
31 - pdftohtml <unknown>
32 [sarge] - pdftohtml <unfixed>
33 [etch] - pdftohtml <unfixed>
34 NOTE: has been replaced by poppler-utils
35 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36 - texlive-base 3.0-12 (embed)
37 - texlive-bin 2007-1 (embed)
38 NOTE: links to poppler
39 - koffice <unfixed> (embed; bug #436163)
40 - libextractor 0.5.12-1 (embed)
41 NOTE: libextractor is using its own pdf decoder now
42 - ipe <unfixed> (embed)
43 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 - ruby-gnome2 <unknown> (embed)
45 NOTE: copy only present in source but links to poppler
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <unfixed> (embed; bug #551293)
48 - poppler <unfixable> (fork)
49
50 ppmd
51 - libcomplearn-mod-ppmd <unfixed> (fork)
52 NOTE: discussion in #458152
53
54 libevent
55 - transmission 1.71-1 (embed; bug #529372)
56
57 lrmi
58 - read-edid 2.0.0-1 (embed; bug #495131)
59
60 peercast
61 - gnome-peercast <removed> (embed)
62 [etch] - gnome-peercast <unfixed> (embed)
63
64 silc-toolkit
65 - silc-client 1.1~beta6-1 (embed)
66
67 icclib
68 - ghostscript <unfixed> (embed)
69 - argyll <unfixed> (embed)
70
71 dietlibc
72 - ccontrol 0.9.1+20071204-1 (static)
73
74 libmikmod
75 - sdl-mixer1.2 <unfixed> (embed)
76 TODO: report bug
77
78 libiax
79 - iaxmodem <unfixable> (embed; bug #548885)
80
81 spandsp
82 - iaxmodem <unfixable> (embed; bug #548885)
83
84 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85 - dpkg <unfixed> (embed)
86 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87 - rsync <unfixed> (embed)
88 NOTE: somehow derived code base
89 - mono <unfixed> (embed)
90 TODO: check mozilla
91 - Linux kernels <unfixed> (embed)
92 - pvpgn 1.7.8-2 (embed)
93 - mrtg 2.12.2-1 (embed)
94 - rpm <unknown> (embed)
95 NOTE: pinged anibal since when rpm was fixed
96 - tuxcmd-modules <unfixed> (embed)
97 - zsync <unfixed>
98 - tra <unfixed>
99 - sash <unfixed>
100 - nsis <unfixed>
101 - mseide-msegui <unfixed>
102 NOTE: mseide
103 - mirrordir <unfixed>
104 - poco <unfixed>
105 - klibc <unfixed>
106 - ghostscript <unfixed>
107 - freeimage <unfixed>
108 - clamav <unfixed> (fork)
109 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110 - tuxonice-userui <unfixed>
111 - plt-scheme <unfixed>
112 - perl <unfixed>
113 - paraview <unfixed>
114 - gcvs <unfixed>
115 - dump <unfixed>
116 - aide <unfixed> (static)
117 - dar <unfixed> (static)
118 - avfs <unfixed>
119 - fpc <unfixed>
120 - winff <unfixed>
121 NOTE: inherited from fpc, see #472304
122 - lazarus <unfixed>
123 NOTE: inherited from fpc, see #472304
124 - erlang <unfixed> (embed)
125 - gamera 3.2.3-1 (embed)
126 - python2.4 <unfixed> (embed; bug #553403)
127 - python2.5 <unfixed> (embed; bug #553403)
128
129 dulwich
130 - hg-git 0.1.0-1 (embed; bug #541996)
131
132 libvigraimpex
133 - hugin <unfixed> (embed; bug #542259)
134 - enblend-enfuse <unfixed> (embed; bug #542258)
135 - gamera 3.2.3-1 (embed)
136
137 libbz2
138 - dpkg <unfixed> (static)
139
140 libgadu
141 - centericq <unfixed> (embed)
142 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144 - kdenetwork 4:3.3.2-5 (embed)
145 NOTE: from kdenetwork: kopete
146 - ekg 1:1.8~rc0-1 (embed)
147 - kadu 0.6.0.2-3 (embed; bug #504430)
148 - gadu <itp> (embed)
149
150 xmlrpc (which package is the "origin" of this code?)
151 - drupal <unfixed> (embed)
152 - phpgroupware <unfixed> (embed)
153 - egroupware <unfixed> (embed)
154 - phpwiki <unfixed> (embed)
155 - php4 <unfixed> (embed)
156 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157
158 shtool (affects build-time only)
159 - mysql-ocaml <unfixed> (embed)
160 - php4 <unfixed> (embed)
161
162 iceape
163 - iceweasel <unfixed> (fork)
164 - icedove <unfixed> (fork)
165 - xulrunner <unfixed> (fork)
166 - kompozer <unfixed> (embed; bug #532168)
167 - galeon <unfixed> (fork)
168 - epiphany-browser <unfixed> (fork)
169 - conkeror <unfixed> (fork)
170 - kazehakase <unfixed> (fork)
171
172 xli
173 - xloadimage <unfixed> (embed)
174
175 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
176 - openmotif <unfixed> (embed)
177 - libxpm <unfixed> (embed)
178
179 kerberized apps with BSD origin
180 - krb4 <removed> (embed)
181 - krb5 <unfixed> (embed)
182 - heimdal <unfixed> (embed)
183
184 grip (which pkg is the origin?)
185 - libcdaudio <unfixed>
186 - grip <unfixed>
187 - gnome-vfs <unfixed>
188 TODO: check vfs2 as well
189
190 fudforum
191 [etch] - phpgroupware <unfixed> (embed)
192 NOTE: phpgroupware-fudforum
193 [sarge] - egroupware-fudforum <removed> (embed)
194
195 libbsd
196 - rdate 1:1.2-3 (embed)
197 - atheme-services <unfixed>
198 - libbsd-arc4random-perl <unfixed>
199 - isakmpd <unfixed>
200
201 cvs
202 - gcvs <unfixed> (embed)
203 NOTE: see cvsunix/src in tarball
204
205 pcre3
206 - php4 <unknown> (embed)
207 - analog 2:5.23-0woody1 (embed)
208 - goffice <unfixed> (embed)
209 NOTE: libgoffice-*
210 - vfu 4.06-4.1 (embed; bug #450754)
211 - tf5 5.0beta7-1 (embed)
212 - monotone 0.43-1 (embed)
213 NOTE: this only affects versions >= 0.37
214 - glib2.0 2.15.2-1 (embed)
215 - apache2 2.0.53-4 (embed)
216 - exim4 4.10-0.srh20.12 (embed)
217 - yacas <unfixed> (embed)
218 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
219 - gtamsanalyzer.app 0.42-5 (embed)
220 - tin 980117-1 (embed)
221 - kazehakase 0.5.2-1
222 - webkit 1.0.1-1 (embed)
223 - qt4-x11 <unfixed> (embed)
224 NOTE: embedded via webkit copy
225 - erlang <unfixed> (embed)
226
227 tiff
228 - wxwindows2.4 2.2.1 (embed)
229 - gamera 3.2.3-1 (embed)
230
231 uudeview
232 - libconvert-uulib-perl <unfixed> (embed)
233 - pan <unfixed> (embed)
234
235 sqlite (not affected by security vulnerabilities so far)
236 - amarok <unfixed> (embed)
237 - monotone 0.43-1 (embed)
238 - iceweasel <unfixed> (embed)
239
240 util-linux/mount
241 - loop-aes-utils <unfixed> (embed)
242 NOTE: contains code from util-linux' mount in the mount-aes-udeb
243
244 sylpheed
245 - sylpheed-claws <unfixed> (fork)
246
247 phpsysinfo
248 - egroupware <unfixed> (embed)
249 - phpgroupware <unfixed> (embed)
250
251 phpldapadmin
252 [sarge] - egroupware <unfixed> (embed)
253 NOTE: removed from egroupware after sarge
254
255 chmlib
256 - kchmviewer <unknown> (embed)
257
258 ffmpeg (libavcodec/libavformat)
259 - mplayer 1.0~rc2-14 (embed; bug #395252)
260 - kino 1.0.0-1
261 - vlc <not-affected> (Links dynamically since initial release)
262 - smilutils 0.3.0-10
263 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
264 - motion 3.1.19-1
265 - gstreamer0.10-ffmpeg 0.10.3-2
266 - xmovie <removed> (static)
267 TODO: gimp-gap (potentially using ffmpeg code as well)
268 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
269
270 faad2
271 - mplayer 1.0~rc2-20 (embed)
272 - avifile <unfixed> (embed; bug #538750)
273 - ffmpeg-debian <removed> (old-version)
274
275 libmad (MPEG decoding lib)
276 - xine-lib <unfixed> (embed)
277 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
278 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
279
280 libdts
281 - xine-lib <unfixed> (embed)
282
283 flac
284 - xine-lib <unfixed> (embed)
285
286 liba52
287 - a52dec <unfixed> (embed)
288 - xine-lib <unfixed> (embed)
289
290 libmpeg2
291 - mpeg2dec <unfixed> (embed)
292 - xine-lib <unfixed> (embed)
293
294 libntlm
295 - wget <unfixed> (fork; bug #550436)
296 - curl <unfixed> (fork; bug #550437)
297 - cntlm <unfixed> (fork; bug #550438)
298
299 uw-imap
300 - pine <unfixed> (embed)
301 - alpine <unfixed> (embed)
302
303 imagemagick
304 - graphicsmagick <unfixed> (fork)
305
306 python-urlgrabber
307 - mercurial <unfixed> (embed; bug #531062)
308 - w3af <unfixed> (embed; bug #555372)
309 [experimental] - harvestman <unfixed> (embed; bug #555373)
310
311 beautifulsoup
312 - python-mechanize <unfixed> (embed; bug #555349)
313 - zope2.11 <unfixed> (embed; bug #555350)
314 - twill <unknown> (embed)
315
316 halibut
317 - nsis <unfixed> (fork)
318
319 libghttp
320 - hotway <unfixed> (embed)
321
322 libsndfile
323 - ardour 1:2.7.1-1 (embed)
324
325 glibmm2.4
326 - ardour 1:2.7.1-1 (embed)
327
328 libgnomecanvasmm2.6
329 - ardour 1:2.7.1-1 (embed)
330
331 libsigc++-2.0
332 - ardour 1:2.7.1-1 (embed)
333
334 soundtouch
335 - ardour 1:2.7.1-1 (embed)
336
337 libmms
338 - xine-lib <unfixed> (embed)
339 - mimms <unfixed> (embed)
340
341 fckeditor
342 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
343 - moin 1.8.2-2 (embed; bug #452599)
344 - karrigell <removed> (embed; bug #452598)
345 - gforge 4.6.99+svn6225-1 (embed)
346 - request-tracker3.8 <unfixed> (embed)
347
348 ipatlas (not packaged in Debian)
349 - moodle <unfixed> (embed; bug #507185)
350
351 libphp-phpmailer
352 - moodle <unfixed> (embed; bug #507185)
353 - mahara <unfixed> (embed)
354 - symfony <unfixed> (embed)
355 [etch] - phpgroupware <unfixed> (embed)
356 NOTE: phpgroupware-felamimail is only in etch
357 - egroupware <unfixed> (embed; bug #504283)
358 - glpi <unfixed>
359
360 htmlArea (not packaged in Debian)
361 - moodle <unfixed> (embed)
362
363 giflib
364 - wine <unfixed> (embed; bug #466181)
365
366 bennu (not packaged in Debian, http://bennu.sourceforge.net)
367 - moodle <unfixed> (embed)
368
369 smarty
370 - moodle 1.8.2-2 (embed; bug #471158)
371 - gallery2 2.2.5-2 (embed; bug #471160)
372 - mahara 0.9.2-2 (embed; bug #471201)
373 - gosa 2.4beta1-1 (embed; bug #471200)
374
375 TinyMCE
376 - wordpress 2.5.1-3 (embed; bug #478257)
377 - moodle <unfixed> (embed; bug #507185)
378 - knowledgeroot <unfixed> (embed)
379 - joomla <itp> (bug #326398)
380
381 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
382 - scite <unfixed> (embed)
383 - qscintilla <unfixed> (embed)
384 - qscintilla2 <unfixed> (embed)
385 - geany <unfixed> (fork)
386 - anjuta <unfixed> (embed)
387
388 libphp-adodb
389 - moodle <unfixed> (embed; bug #507185)
390 NOTE: also AdoDB-XML Schema
391 - gallery2 <unfixed> (embed)
392 - phppgadmin <unfixed> (embed)
393 - egroupware <unfixed> (embed)
394 - phpwiki <unfixed> (embed)
395 - torrentflux 2.0beta1-2 (embed)
396 - ipplan <unfixed> (embed)
397 - typo3-src <unfixed> (embed)
398 - cacti <unknown> (embed)
399 [sarge] - cacti <unfixed> (embed)
400 NOTE: dependency exists, but internal version is used
401 - gforge 4.7~rc2-6 (embed)
402 - mahara <unfixed> (embed)
403
404 gzip
405 - linux-kernel <unfixed> (embed)
406 NOTE: lib/inflate.c
407 - klibc <unfixed> (embed)
408 NOTE: based on linux-kernel gzip code
409 - busybox <unfixed> (embed)
410
411 neon
412 - cadaver 0.22.3+debian-1 (embed; bug #188381)
413 - gnome-vfs2 <unfixed> (embed; bug #395874)
414 [etch] - litmus <unfixed> (embed; #395875)
415 - litmus <removed> (embed; #395875)
416 [sarge] - screem <unfixed> (embed)
417 - sitecopy 1:0.16.3-5 (embed; bug #395876)
418 [etch] - tla <unfixed> (embed; bug #395877)
419 [sarge] - tla <unfixed> (embed; bug #395877)
420
421 libmodplug
422 - gst-plugins-bad0.10 <unfixed> (embed)
423
424 libvncserver
425 - vino <unfixed> (embed)
426
427 putty
428 - filezilla <unfixed> (embed)
429
430 tinyxml (not packaged in Debian)
431 - filezilla <unfixed>
432
433 gv
434 - evince <unfixed> (embed)
435 NOTE: ps/ tree from gv 3.5.8
436 NOTE: evince-gtk is affected (a component of evince source package)
437
438 libXbae
439 - paw <removed> (embed)
440 [etch] - paw <unfixed> (embed)
441
442 libgtkhtml
443 - claws-mail-extra-plugins <unfixed> (fork)
444
445 libXaw
446 - paw <removed> (embed)
447 [etch] - paw <unfixed> (embed)
448 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
449
450 libgd2
451 - graphviz <unfixed> (embed)
452 NOTE: lib/gd seems to be 2.0.33
453 - wml <unfixed> (embed)
454 - libwmf <unfixed> (embed)
455 NOTE: derived from gd 1.6.3
456
457 rar
458 - unrar-nonfree <unfixed> (embed)
459
460 unrar-free (maybe this code is derived from the original rar, too?)
461 - clamav <unfixed> (embed)
462 NOTE: seems to be disabled in default config
463
464 mplayer (DirectMedia Object loader)
465 - xine-lib <unfixed> (embed)
466 NOTE: src/libw32dll/
467 - vlc <unfixed> (embed)
468 NOTE: modules/codec/dmo/
469 - mplayer 1.0~rc2-20 (embed)
470
471 libwpd (WordPerfect converter)
472 - openoffice.org <unfixed> (embed)
473
474 fsplib (http://sourceforge.net/projects/fsp/)
475 - gftp <unfixed> (embed)
476 NOTE: lib/fsplib version 0.3
477
478 sprng
479 - tree-puzzle <unfixed> (embed)
480
481 librpcsecgss
482 - krb5 <unfixed> (embed)
483
484 jasper
485 - ghostscript <unfixed> (embed)
486 - gs-gpl <unfixed> (embed)
487
488 libiris
489 - psi <unfixed> (embed)
490 - kdenetwork <unfixed> (embed)
491 NOTE: kopete embeds libiris but links dynamically to libidn
492 - kdegames <unfixed> (embed)
493 NOTE: ksirk/kde4
494
495 libidn
496 - monotone 0.43-1 (embed)
497 - psi <unfixed> (embed)
498 NOTE: psi embeds libiris which embeds libidn
499 - kdegames <unfixed> (embed)
500 NOTE: kdegames/kde4 embeds libiris which embeds libidn
501
502 liblua
503 - monotone 0.43-1 (embed)
504 - nmap 5.00-1 (embed; bug #527997)
505 [lenny] - nmap <unfixed> (embed; bug #527997)
506
507 libbotan
508 - monotone 0.43-1 (embed)
509
510 NetXX
511 - monotone 0.43-1 (embed)
512
513 libgc
514 - mono <unfixed> (embed)
515
516 lzma
517 - p7zip <unfixed> (embed)
518 - xz-utils <unfixed> (fork)
519
520 lzo
521 - grub2 <unfixed> (embed)
522
523 yassl
524 - mysql-dfsg-5.0 <unfixed> (embed)
525
526 pax code
527 - tar <unfixed> (embed)
528 - cpio <unfixed> (embed)
529
530 t1lib
531 - tetex-bin 2.0.2-1 (embed)
532 - texlive-bin <unknown> (embed)
533
534 guichan
535 - boswars <unfixed> (embed)
536 NOTE: maintainer notified us, working on it
537
538 tolua
539 - boswars <unfixed> (embed)
540 NOTE: maintainer notified us, working on it
541
542 asio-dev
543 - luxrender <removed> (embed)
544
545 xine-lib
546 - vlc <unfixed> (embed)
547 NOTE: only parts included in modules/access/rtsp
548
549 netpbm
550 - tcl8.3 <unfixed> (embed)
551 - tcl8.4 <unfixed> (embed)
552 - tcl8.5 <unfixed> (embed)
553 NOTE: generic/tkImgGIF.c
554
555 tk8.5
556 - tk8.0 <removed> (old-version)
557 - tk8.3 <unfixed> (old-version)
558 - tk8.4 <unfixed> (old-version)
559 - perl-tk <unfixable> (fork)
560
561 samba
562 - mc 2:4.6.2~git20080311-1 (embed)
563 NOTE: maintainer is aware of this, currently searching a solution
564
565 plib1.8.4c2
566 - boson <unfixed> (fork)
567 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
568
569 fribidi
570 - quesoglc <unfixed> (embed)
571 NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
572
573 glew
574 - quesoglc <unfixed> (embed; bug #489341)
575 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
576
577 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
578 - transcend <unfixed> (embed)
579 - cultivation <unfixed> (embed)
580 - passage <unfixed> (embed)
581 - gravitation <unfixed> (embed)
582
583 tar
584 - libarchive <unfixed> (embed)
585 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
586
587 cpio
588 - libarchive <unfixed> (embed)
589 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
590
591 webkit
592 - qt4-x11 <unfixed> (embed)
593
594 ftgl
595 - blender 2.46+dfsg-1 (embed)
596
597 wv
598 - abiword <unfixed>
599
600 qemu
601 - kvm <unfixed> (embed; bug #543159)
602 - xen-3 <unfixed> (embed)
603 - xen-unstable <unfixed> (embed)
604
605 vgabios
606 - kvm <unfixed> (embed; bug #489442)
607
608 bochs
609 - kvm <unfixed> (embed; bug #489442)
610
611 speex
612 - vorbis-tools <unfixed> (embed)
613 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
614 - gst-plugins-good0.10 <unfixed> (embed)
615 - xine-lib <unfixed> (embed)
616 - libfishsound <unfixed> (embed)
617 - libannodex <unfixed> (embed)
618 - vlc <unfixed> (embed)
619 - xmms-speex <unfixed> (embed)
620 - libsdl-sound1.2 <unfixed> (embed)
621 - sweep <unfixed> (embed)
622
623 libreadline
624 - magic <itp> (old-version)
625
626 opcode
627 - ode <unfixed> (embed)
628 NOTE: opcode is not a package in debian, it is just embedded
629 NOTE: http://www.codercorner.com/Opcode.htm
630
631 gimpact
632 - ode <unfixed> (embed)
633 NOTE: gimpact is not a package in debian, it is just embedded
634 NOTE: http://gimpact.sf.net
635
636 mochikit
637 - mahara <unfixed> (embed)
638 NOTE: they require extra patches, still unmerged upstream
639 - ntop <unfixed> (embed)
640 - coherence 0.6.2-1 (embed)
641 - paste <unfixed> (embed)
642 - turbogears <unfixed> (embed)
643 - plone3 <unfixed> (embed)
644 - xulrunner <unfixed> (embed)
645 - libjifty-plugin-chart-perl <unfixed> (embed)
646 - sabnzbdplus <unfixed> (embed)
647 - tgmochikit <unfixed> (embed)
648
649 prototypejs
650 - netbeans-ide 6.0.1+dfsg-2 (embed)
651 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
652 - webcit <unfixed> (embed; bug #555219)
653 - asterisk 1:1.6.2.0~rc3-1 (embed)
654 - libjson-ruby 1.1.4-1 (embed; bug #555224)
655 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
656 - horde3 <unfixed> (embed)
657 - knowledgeroot <unfixed> (embed; bug #555230)
658 - mediatomb <unfixed> (embed; bug #555233)
659 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
660 - ebug-http <unfixed> (embed; bug #555236)
661 - phpgedview <removed> (embed)
662 - poker-network <unfixed> (embed; bug #555238)
663 - rails 2.1.0-6 (embed)
664 - wordpress 2.5.0-2 (embed; bug #555243)
665 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
666 TODO: search through all of the other zope packages
667 - ampache 3.4.1-2 (embed)
668 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
669 - hobix 0.5~svn20070319-4 (embed; bug #555247)
670 - zabbix 1.6.6-4 (embed; bug #555250)
671 - chora2 <unfixed> (embed; bug #555253)
672 - gollem <unfixed> (embed; bug # 555254)
673 - jscropperui 1.2.1-1 (embed; bug #555257)
674 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
675 - ingo1 <unfixed> (embed; bug #555261)
676 - kronolith2 <unfixed> (embed; bug #555262)
677 - activeldap <unfixed> (embed)
678 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
679 - mantis <unfixed> (embed; bug #555265)
680 - otrs2 2.3.4-6 (embed; bug #555267)
681 - webcalendar <unfixed> (embed; bug #555269)
682 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
683 - jifty 0.90519-1 (embed; bug #555271)
684 - jquery <unfixed> (embed; bug #555272)
685 - passenger 2.2.5debian1-1 (embed; bug #555273)
686 - plone3 <unfixed> (embed; bug #555275)
687 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
688 - xulrunner <unfixed> (embed)
689 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
690
691 gdb
692 - insight <unfixed> (embed)
693
694 e2fsprogs
695 - ldiskfsprogs <unfixable> (fork)
696
697 quazip (not packaged in Debian)
698 - qcake <unfixed> (embed)
699 NOTE: starting with upstream version 0.6.4
700
701 exo
702 - pcmanfm <unfixed> (embed; bug #499677)
703 NOTE: slightly modified source code
704
705 java
706 - openjdk-6 <unfixed>
707 - sun-java5 <unfixed>
708 - sun-java6 <unfixed>
709
710 libphp-snoopy
711 - ampache 3.4.1-2 (embed; bug #504169)
712 - mahara 1.0.5-2 (embed; bug #504170)
713 - pixelpost 1.7.1-5 (embed; bug #504171)
714 - mediamate 0.9.3.6-5 (embed; bug #504172)
715 - opendb <removed> (embed; bug #504173)
716 [etch] - opendb <unfixed> (embed; bug #504173)
717 - wordpress 2.5.1-9 (embed; bug #443948)
718 - moodle <unfixed> (embed; bug #507185)
719 [etch] - phpgroupware <unfixed> (embed)
720 NOTE: phpgroupware-felamimail
721 - magpierss 0.72-3 (embed; bug #431089)
722
723 jquery
724 - zekr <unfixed> (embed)
725 - wordpress <unknown> (embed)
726 - yocto-reader <unfixed> (embed)
727 - textpattern <unfixed> (embed)
728 - genshi 0.5.1-1 (embed)
729 NOTE: compressed file under examples/ dir
730 - prewikka <unfixed> (embed)
731 - libramaze-ruby <unfixed> (embed)
732 - drupal5 <unfixed> (embed)
733 - b2evolution <unfixed> (embed)
734 - wesnoth <unfixed> (embed)
735
736 tablesorter (jquery plugin, not packaged yet)
737 - wesnoth <unfixed> (embed)
738
739 kses
740 - wordpress <unfixed> (embed; bug #504242)
741 NOTE: their copy has all methods renamed to wp_<foo>
742 NOTE: kses isn't in Debian, RFP: #504240
743 - moodle <unfixed> (embed; bug #507185)
744 - egroupware <unfixed> (embed)
745
746 magpierss
747 - wordpress <unfixed> (embed; bug #504242)
748 - moodle <unfixed>
749
750 php-gettext
751 - wordpress 2.8.4-1 (embed; bug #504242)
752
753 libphp-ixr (name may change, it is the Incutio XML-RPC)
754 - wordpress <unfixed> (embed; bug #504242)
755 NOTE: libphp-ixr isn't in Debian, RFP: #504236
756 - dokuwiki <unfixed> (embed)
757 - textpattern <unfixed> (embed)
758
759 libphp-cas
760 - glpi <unfixed> (embed)
761 - moodle <unfixed> (embed; bug #505984)
762
763 scriptaculous (prototype.js is among the embeds in the following)
764 - glpi <unfixed> (embed)
765 - libaws <unfixed> (embed; bug #555222)
766 - op-panel <unfixed> (embed)
767 - symfony <unfixed> (embed)
768 NOTE: maintainer says there are extra incompatible changes required
769 - pixelpost 1.7.1-6 (embed)
770 - webhelpers <unfixed> (embed)
771 - qwik <unfixed> (embed; bug #555241)
772 - smokeping <unfixed> (embed)
773 - turba2 <unfixed> (embed)
774 - typo3-src 4.2.3-1 (embed)
775 - request-tracker3.6 <unfixed> (embed)
776 - request-tracker3.8 <unfixed> (embed)
777 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
778 - wordpress 2.5.0-2 (embed)
779
780 libmarkdown-php
781 - moodle <unfixed> (embed; bug #507185)
782 - pixelpost 1.7.1-6 (embed)
783
784 php-openid
785 - wordpress-openid <itp> (embed)
786
787 geshi
788 - dokuwiki 0.0.20080505-3.1 (embed)
789 - pgfouine 1.0-1.1 (embed)
790 - websvn 2.1.0-1 (embed)
791
792 webcalendar
793 - gforge 4.7~rc2-6 (embed; bug #504758)
794
795 libical
796 - kdepim <unfixed> (fork)
797 - kdepimlibs <unfixed> (fork)
798 NOTE: fixed in KDE4 post 4.1.x series
799 - claws-mail-extra-plugins <unfixed> (fork)
800
801 libltdl3
802 - kdelibs <unfixed> (embed)
803 NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
804 - synfig <unfixed> (embed)
805
806 harfbuzz
807 - qt4-x11 <unfixed> (embed)
808
809 libzip
810 - php5 <unfixed> (fork)
811 - odt2txt <unfixed> (embed; bug #523808)
812
813 json.php (not packaged; should be replaced with php's built-in functions)
814 - moodle <unfixed>
815 - yui <unfixed>
816 - gallery2 <unfixed>
817 - dokuwiki <unfixed>
818 - typo3-src <unfixed>
819
820 php-fpdf
821 - tcpdf <itp> (fork)
822 - moodle <unfixed>
823 - phpwiki <unfixed>
824 - egroupware <unfixed>
825 - ldap-account-manager <unfixed> (fork)
826
827 tcpdf (itp: #495985)
828 - moodle <unfixed>
829 - phpmyadmin <unfixed>
830
831 typo3
832 - moodle <unfixed>
833
834 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
835 - moodle <unfixed>
836 - gosa <unfixed>
837
838 php-ole (itp: #487558)
839 - moodle <unfixed>
840
841 pieforms (http://www.catalyst.net.nz)
842 - mahara <unfixed>
843
844 savant2 (http://phpsavant.com)
845 - egroupware <unfixed>
846
847 rssparser (http://nwow.org)
848 - egroupware <unfixed>
849 - phpgroupware <unfixed>
850
851 lcms
852 - openjdk-6 <unfixed> (fork)
853
854 libphp-phplayersmenu
855 - diogenes <unfixed>
856 - phpldapadmin <unfixed>
857
858 libphp-pclzip
859 - docvert <unfixed>
860 - moodle <unfixed>
861 - egroupware <unfixed>
862
863 libphp-simplepie
864 - dokuwiki <unfixed>
865
866 libphp-jpgraph
867 - egroupware <unfixed>
868
869 php-simpletest
870 - moodle <unfixed>
871
872 libpng
873 - iceweasel <not-affected> (uses xulrunner)
874 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
875 - iceape 1.0.13~pre080614i-0etch1 (embed)
876 - xulrunner 1.9.0.13-1 (embed)
877 [lenny] - xulrunner 1.9.0.11-0lenny1
878 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
879 - gamera 3.2.3-1 (embed)
880
881 irssi
882 - silc-client <unfixed> (embed)
883 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
884
885 extc
886 - mtasc <unfixed> (embed)
887 - haxe <unfixed> (embed)
888
889 swflib
890 - mtasc <unfixed> (embed)
891 - haxe <unfixed> (embed)
892
893 libitext-java
894 - bouncycastle 2.1.4-1 (embed)
895
896 python-ply
897 - pyke <unfixed> (embed; bug #555363)
898 - pywbem <unfixed> (embed; bug #555364)
899 - sepolgen <unfixed> (embed; bug #555365)
900 - zope-textindexng3 <unknown> (embed)
901 - iceweasel <unknown> (embed)
902 - xulrunner <unknown> (embed)
903 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
904
905 libdumbnet (libdnet upstream)
906 - nmap <unfixed> (fork)
907
908 gcc-4.4
909 - gcc-mingw32 <unfixed> (embed)
910
911 camlimages
912 - advi <unfixed> (static; bug #550441)
913
914 memcached
915 - memcachedb <unfixed> (embed)
916
917 yajl
918 - argyll <unfixed> (embed; bug #544223)
919 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
920
921 libept
922 - adept <unfixed> (embed; bug #540649)
923
924 libvorbis
925 - iceweasel <not-affected> (uses xulrunner)
926 - xulrunner <unfixed> (embed; bug #540959)
927 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
928 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
929
930 cairo
931 - iceweasel <not-affected> (uses xulrunner)
932 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
933
934 liboggz
935 - iceweasel <not-affected> (uses xulrunner)
936 - xulrunner <unfixed> (embed; bug #540949)
937 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
938 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
939
940
941 liboggplay
942 - iceweasel <not-affected> (uses xulrunner)
943 - xulrunner <unfixed> (embed; bug #540949)
944 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
945 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
946
947 php-net-dnsbl
948 - serendipity <unfixed> (embed)
949
950 php-onyx-rss
951 - serendipity <unfixed> (embed)
952
953 php-text-wiki
954 - serendipity <unfixed> (embed)
955
956 php-xml-rpc
957 - serendipity <unfixed> (embed)
958
959 polarssl (does not have a shared library)
960 - pdkim <itp> (embed; bug #543150)
961 - xyssl <unfixed> (old-version)
962
963 pidgin
964 - gaim <removed> (old-version)
965
966 icu
967 - webkit 1.0.1-1 (embed; bug #547214)
968 - texlive-bin <unfixed> (fork)
969 NOTE: texlive upstream working with icu upstream to merge their changes
970
971 cyrus-imapd-2.2
972 - kolab-cyrus-imapd <unfixed> (fork)
973 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
974
975 python-cxx-dev
976 - freecad <unfixed> (embed; bug #547936)
977
978 libzipios++-dev
979 - freecad <unfixed> (embed; bug #547941)
980
981 linux-2.6
982 - kvm <unfixed> (embed; bug #549973) [./kernel/*]
983 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
984 - kernel-source-2.6.8 <removed> (old-version)
985 - kernel-source-2.4.27 <removed> (old-version)
986 - kernel-source-2.4.24 <removed> (old-version)
987 - kernel-source-2.2.25 <removed> (old-version)
988 - kernel-source-2.2.20 <removed> (old-version)
989
990 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
991 - kvm <unfixed> (embed) [./libfdt/*]
992
993 qweb (not packaged)
994 - ajaxterm <unfixed>
995
996 opensaml2
997 - opensaml <removed> (old-version)
998
999 shibboleth-sp2
1000 - shibboleth-sp <removed> (old-version)
1001
1002 tuxonice-userui
1003 - suspend2-userui <removed> (old-version)
1004
1005 expat
1006 - w3c-libwww <removed> (embed; bug #551941)
1007 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1008 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1009 - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1010 - python2.4 <unfixed> (embed; bug #553403)
1011 - wxwindows2.4 <removed> (embed)
1012 - wxwidgets2.6 <unfixed> (embed)
1013 - wxwidgets2.8 <unfixed> (embed)
1014 - celementtree <unfixed> (embed)
1015 - audacity <unfixed> (embed)
1016 - matanza <unfixed> (embed)
1017 - tdom <unfixed> (embed)
1018 - udunits <unfixed> (embed)
1019 - apr-util 1.2 (embed)
1020 - ayttm <unfixed> (embed)
1021 - cableswig <unfixed> (embed)
1022 - cadaver <unfixed> (embed)
1023 - cmake <unfixed> (embed)
1024 - coin3 <unfixed> (embed)
1025 - gdcm <unfixed> (embed)
1026 - ghostscript <unfixed> (embed)
1027 - grmonitor <unfixed> (embed)
1028 - iceape <unfixed> (embed)
1029 - insighttoolkit <unfixed> (embed)
1030 - libparagui1.1 <unfixed> (embed)
1031 - paraview <unfixed> (embed)
1032 - poco <unfixed> (embed)
1033 - simgear <unfixed> (embed)
1034 - sitecopy <unfixed> (embed)
1035 - smart 1.0-1 (embed)
1036 [etch] - smart <unfixed> (embed)
1037 - swish-e <unfixed> (embed)
1038 - tla <unfixed> (embed)
1039 - vtk <unfixed> (embed)
1040 - wbxml2 <unfixed> (embed)
1041 - xmlrpc-c <unfixed> (embed)
1042 - iceweasel <unfixed> (embed)
1043 - kompozer <unfixed> (embed)
1044 - vxl <unfixed> (embed)
1045 - xulrunner <unfixed> (embed)
1046 - apache2 2.2 (embed)
1047 - texlive-bin <unfixed> (embed) [included twice]
1048 - vnc4 <unfixed> (embed)
1049 - xotcl <unfixed> (embed)
1050
1051 xerces-c
1052 - xerces-c2 <unfixed> (old-version)
1053 - xerces27 <removed> (old-version)
1054
1055 md5 (RSA's version; not the gnu version provided by coreutils)
1056 - w3c-libwww <removed> (embed; bug #551942)
1057 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1058
1059 enet
1060 - sauerbraten <unfixed> (embed; #497194)
1061
1062 eglibc
1063 - glibc <removed> (old-version)
1064
1065 galib
1066 - gamera 3.2.3-1 (embed)
1067
1068 configobj
1069 - bzr <unfixed> (embed; bug #555336)
1070 - elisa <unfixed> (embed; bug #555337)
1071 - gaupol <unfixed> (embed; bug #555338)
1072 - ipython <unfixed> (embed; bug #555339)
1073 - pida <unfixed> (embed; bug #555340)
1074 - psychopy <unfixed> (embed; bug #555341)
1075 - rest2web <unfixed> (embed; bug #555342)
1076 - auth2db <unknown> (embed)
1077 - dynagen <unknown> (embed)
1078 - iceweasel <unknown> (embed)
1079 - sabnzbdplus <unknown> (embed)
1080 - xulrunner <unknown> (embed)
1081 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1082
1083 python-clientform
1084 - bibus <unfixed> (embed; bug #555332)
1085 - zope2.10 <unfixed> (embed; bug #555333)
1086 - zope2.11 <unfixed> (embed; bug #555334)
1087 - python-mechanize <unknown> (embed)
1088 - twill <unknown> (embed)
1089
1090 python-mechanize
1091 - zope2.10 <unfixed> (embed; bug #555337)
1092 - zope2.11 <unfixed> (embed; bug #555338)
1093 - twill <unknown> (embed; bug #555339)
1094
1095 pexpect
1096 - duplicity 0.6.06-1 (embed; bug #555361)
1097 - hplip <unfixed> (embed; bug #555362)
1098 - smart <unfixed> (embed; bug #555363)
1099
1100 pyparsing
1101 - bauble <unfixed> (embed; bug #555366)
1102 - boa-constructor 0.6.1-8 (embed; bug #555367)
1103 - calibre <unfixed> (embed; bug #555368)
1104 - matplotlib <unfixed> (embed; bug #531024)
1105 - zhpy <unfixed> (embed; bug #555370)
1106 - polybori <unknown> (embed)
1107 - python-whoosh <unknown> (embed)
1108 - twill <unknown> (embed)
1109 - zope-textindexng3 <unknown> (embed)
1110
1111 python-pysqlite2
1112 - python2.4 <unfixed> (embed; bug #553403)
1113 - python2.5 <unfixed> (embed; bug #553403)
1114
1115 celementtree
1116 - python2.5 <unfixed> (embed)
1117 - smart 1.0-1 (embed)
1118 [etch] - smart <unfixed> (embed)
1119
1120 elementtree
1121 - python2.5 <unfixed> (embed)
1122 - bzr <unfixed> (embed; bug #555343)
1123 - gedit 2.28.2-1 (embed; bug #555344)
1124 - smart 1.0-1 (embed)
1125 [etch] - smart <unfixed> (embed)
1126 - solfege <unfixed> (embed; bug #555345)
1127 - w3af <unfixed> (embed; bug #555346)
1128 - python-qt4 <unknown> (embed)
1129 - sphinx <unknown> (embed)
1130 - python-nltk <itp> (embed)
1131
1132 python2.5
1133 - python2.4 <unfixed> (old-version)
1134 - jython <unfixed> (embed)
1135 NOTE: embeds many stdlib modules
1136 - python-django <unfixed> (embed; bug #555419)
1137 NOTE: embeds stdlib modules: doctest, decimal
1138 - gamera 3.2.3-1 (embed)
1139 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1140 - boa-constructor <unfixed> (embed; bug #555426)
1141 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1142 - nicotine <unfixed> (embed; bug #555427)
1143 NOTE: embeds stdlib modules: ConfigParser
1144 - museek+ <unfixed> (embed; bug #555428)
1145 NOTE: embeds stdlib modules: ConfigParser
1146 - vegastrike-data <unfixed> (embed)
1147 NOTE: embeds many stdlib modules
1148 - codespeak-lib <unfixed> (embed; bug #555420)
1149 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1150 - config-manager <unfixed> (embed; bug #555423)
1151 NOTE: embeds stdlib modules: optparse
1152 - jhbuild <unfixed> (embed; bug #555421)
1153 NOTE: embeds stdlib modules: optparse, subprocess
1154 - smart <unfixed> (embed; bug #555432)
1155 NOTE: embeds stdlib modules: optparse
1156 - pyprotocols <unfixed> (embed; bug #555433)
1157 NOTE: embeds stdlib modules: doctest
1158 - ruledispatch <unfixed> (embed; bug #555434)
1159 NOTE: embeds stdlib modules: doctest
1160 - distribute <unfixed> (embed)
1161 NOTE: embeds stdlib modules: doctest
1162 - python-setuptools <unfixed> (embed; bug #555435)
1163 NOTE: embeds stdlib modules: doctest
1164 - zope.testing <unfixed> (embed; bug #555436)
1165 NOTE: embeds stdlib modules: doctest
1166 - translate-toolkit <unfixed> (embed; bug #555422)
1167 NOTE: embeds stdlib modules: textwrap, contextlib
1168 - libtpclient-py <unfixed> (embed; bug #555424)
1169 NOTE: embeds stdlib modules: subprocess
1170 - grass <unfixed> (embed; bug #555425)
1171 NOTE: embeds stdlib modules: subprocess
1172 - coherence <unfixed> (embed; bug #555429)
1173 NOTE: embeds stdlib modules: uuid
1174 - python-django-extensions <unfixed> (embed; bug #555430)
1175 NOTE: embeds stdlib modules: uuid
1176 - setroubleshoot <unfixed> (embed; bug #555431)
1177 NOTE: embeds stdlib modules: uuid
1178 - linkchecker <unfixed> (embed; bug #555414)
1179 NOTE: embeds msgfmt.py script
1180 - imdbpy <unfixed> (embed)
1181 NOTE: embeds msgfmt.py script
1182 - kiwi <unfixed> (embed)
1183 NOTE: embeds msgfmt.py script
1184 - moin <unfixed> (embed)
1185 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1186 - plone3 <unfixed> (embed)
1187 NOTE: embeds msgfmt.py script
1188 - roundup <unfixed> (embed)
1189 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1190 - rednotebook <unfixed> (embed; bug #555415)
1191 NOTE: embeds msgfmt.py script
1192 - turbogears <unfixed> (embed)
1193 NOTE: embeds msgfmt.py script
1194 - elisa <unfixed> (embed)
1195 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1196 - calibre <unfixed> (embed)
1197 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1198 - mailman <unfixed> (embed; #555416)
1199 NOTE: embeds msgfmt.py script
1200 - python-docutils <unknown> (embed)
1201 NOTE: embeds stdlib modules: optparse, textwrap
1202 - python-imaging <unknown> (embed)
1203 NOTE: embeds stdlib modules: doctest
1204 - python-mechanize <unknown> (embed)
1205 NOTE: embeds stdlib modules: doctest
1206 - twill <unknown> (embed)
1207 NOTE: embeds stdlib modules: subprocess
1208 - zeroc-ice <unknown> (embed)
1209 NOTE: embeds stdlib modules: subprocess
1210 - wxwidgets2.8 <unknown> (embed)
1211 NOTE: embeds stdlib modules: subprocess
1212 - cycle <unknown> (embed)
1213 NOTE: embeds msgfmt.py script
1214 - deluge <unknown> (embed)
1215 NOTE: embeds msgfmt.py script
1216 - opendict <unknown> (embed)
1217 NOTE: embeds msgfmt.py script
1218 - openerp-client <unknown> (embed)
1219 NOTE: embeds msgfmt.py script
1220 - rapidsvn <unknown> (embed)
1221 NOTE: embeds msgfmt.py script
1222 - wammu <unknown> (embed)
1223 NOTE: embeds msgfmt.py script
1224 - gaphor <unknown> (embed)
1225 NOTE: embeds msgfmt.py script
1226 - pida <unknown> (embed)
1227 NOTE: embeds msgfmt.py script
1228 - python-formencode <unknown> (embed)
1229 NOTE: embeds msgfmt.py script
1230 - duplicity <unfixed> (embed)
1231 NOTE: embeds stdlib module: urlparse, tarfile
1232 - pygophered <unfixed> (embed)
1233 NOTE: embeds stdlib module: zipfile
1234
1235 argparse
1236 - twill <unfixed> (embed; bug #555347)
1237 - ipython <unfixed> (embed; bug #555348)
1238
1239 coherence
1240 - elisa <unfixed> (embed; bug #555335)
1241
1242 simpletal
1243 - plastex <unfixed> (embed; bug #555371)
1244
1245 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1246 - postr <unfixed> (embed)
1247 - elisa <unfixed> (embed)
1248
1249 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1250 - apertium-tolk <unfixed> (embed)
1251 - ipython <unfixed> (embed)
1252 - virtaal <unfixed> (embed)
1253
1254 distribute
1255 - setuptools <removed> (old-version)
1256
1257 rails
1258 - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1259 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1260 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1261 - thin <unfixed> (embed) [./spec/rails_app/*]
1262 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1263 NOTE: be dangerous if developers are naively basing their code off of the examples
1264 NOTE: prototype.js is among the example files
1265
1266 lucene2 (prototype.js is among the embeds in the following)
1267 - lucene <unfixed> (old-version)
1268 - pylucene <unfixed> (embed)
1269 - libpdfbox-java <unfixed> (embed)
1270 - libfontbox-java <unfixed> (embed)
1271 - libjempbox-java <unfixed> (embed)
1272 - solr <unfixed> (embed)
1273
1274 unicode-data
1275 - syslinux <unfixed> (embed)
1276 - camomile <unfixed> (embed)
1277 - fribidi <unfixed> (embed)
1278 - m17n-db <unfixed> (embed)
1279 - sbcl <unfixed> (embed)
1280 - heimdal <unfixed> (embed)
1281 - icu <unfixed> (embed)
1282 - icu4j <unfixed> (embed)
1283 - krb5 <unfixed> (embed)
1284 - moodle <unfixed> (embed)
1285 - openldap <unfixed> (embed)
1286 - pike7.6 <unfixed> (embed)
1287 - samba <unfixed> (embed)
1288 - samba4 <unfixed> (embed)
1289 - cmucl <unfixed> (embed)
1290 - typo3-src <unfixed> (embed)
1291 - mauve <unfixed> (embed)
1292 - texlive-bin <unfixed> (embed)
1293 - ypsilon <unfixed> (embed)
1294 - jeuclid <unfixed> (embed)
1295 - charmap.app <unfixed> (embed)
1296 - clisp <unfixed> (embed)
1297 - gnulib <unfixed> (embed)
1298 - opensrs-client <unfixed> (embed)
1299 - saxonb <unfixed> (embed)
1300 - rails <unfixed> (embed)
1301
1302 feedparser
1303 - rawdog <unfixed> (embed; bug #383422)
1304 - miro <unfixed> (embed; bug #555351)
1305 - calibre <unfixed> (embed; bug #555352)
1306 - freevo <unfixed> (embed; bug #555353)
1307 - pida <unfixed> (embed; bug #555354)
1308 - planet-venus <unfixed> (embed; bug #555355)
1309 - plone3 <unfixed> (embed; bug #555356)
1310 - exaile 0.2.14+debian-1 (embed)
1311 - screenlets 0.1.2-3 (embed)
1312 NOTE: included twice
1313
1314 agg:
1315 - matplotlib <unfixed> (embed: bug #377271)
1316 - contextfree <unfixed> (embed)
1317 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1318 - exactimage <unfixed> (embed)
1319 - python-enable <unfixed> (embed)
1320 - mapnik 0.5.1-3 (embed)
1321 NOTE: links statically to agg, but shared library is not available (bug #377271)
1322
1323 vtk
1324 - paraview <unfixable> (embed; bug #495426)
1325
1326 txt2tags
1327 - rednotebook <unfixed> (embed)
1328
1329 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1330 - gajim <unfixed> (embed)
1331 - emesene <unfixed> (embed)
1332 - convirt <unfixed> (embed)
1333 - pida <unfixed> (embed)
1334 - rednotebook <unfixed> (embed)
1335
1336 horde3 (prototype.js is among the embeds in the following)
1337 - mnemo2 <unfixed> (embed)
1338 - nag2 <unfixed> (embed)
1339
1340 cimg
1341 - gmic <itp> (embed)
1342
1343 mootools
1344 - gmic <itp> (embed)
1345
1346 openldap
1347 - openldap2.3 <removed> (old-version)
1348
1349 grub2
1350 - grub <unfixed> (old-version)
1351
1352 gnupginterface
1353 - duplicity <unfixed> (embed)
1354
1355 python-dateutil
1356 - awn-extras-applets <unfixed> (embed)
1357 - matplotlib <unknown> (embed)
1358
1359 cups
1360 - cupsys <removed> (old-version)
1361
1362 yui
1363 - bcfg2 <not-affected> (present in source but not included in any binary files)
1364 - serendipity <unfixed> (embed; bug #557746)
1365 - moodle 1.8.2.dfsg-5 (embed)
1366 - jifty <unfixed> (embed; bug #557748)
1367 - webgui 7.7.26-1 (embed)
1368 - loggerhead 1.17-1 (embed)

  ViewVC Help
Powered by ViewVC 1.1.5