/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 13447 - (show annotations) (download)
Fri Dec 4 02:29:41 2009 UTC (3 years, 6 months ago) by gilbert-guest
File size: 41470 byte(s)
there is an itp for tinyxml with a package already available on mentors
- anyone want to sponsor this?
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy, <unfixed>, <removed>,
14 <itp>, <not-affected>, <unknown> if the version number can not
15 be determined, or <unfixable> for unavoidable cases (e.g., forks
16 that add real value)
17 sort: static (linking statically against a lib)
18 embed (embedding a copy of the library into another source package)
19 fork (the package is not just embedding code but it is a fork and
20 thus might share parts of the source code)
21 old-version (the package is an older version of essentially
22 the same code)
23
24 The srcpkg might be some string to identify the code if there is no
25 specific source package.
26
27 Everything up to the next line is ignored.
28 ---BEGIN
29 xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30 NOTE: Fixed packages link to poppler library unless otherwise noted
31 - pdftohtml <unknown>
32 [sarge] - pdftohtml <unfixed>
33 [etch] - pdftohtml <unfixed>
34 NOTE: has been replaced by poppler-utils
35 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36 - texlive-base 3.0-12 (embed)
37 - texlive-bin 2007-1 (embed)
38 NOTE: links to poppler
39 - koffice <unfixed> (embed; bug #436163)
40 - libextractor 0.5.12-1 (embed)
41 NOTE: libextractor is using its own pdf decoder now
42 - ipe <unfixed> (embed)
43 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 - ruby-gnome2 <unknown> (embed)
45 NOTE: copy only present in source but links to poppler
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <unfixed> (embed; bug #551293)
48 - poppler <unfixable> (fork)
49
50 ppmd
51 - libcomplearn-mod-ppmd <unfixed> (fork)
52 NOTE: discussion in #458152
53
54 libevent
55 - transmission 1.71-1 (embed; bug #529372)
56
57 lrmi
58 - read-edid 2.0.0-1 (embed; bug #495131)
59
60 peercast
61 - gnome-peercast <removed> (embed)
62 [etch] - gnome-peercast <unfixed> (embed)
63
64 silc-toolkit
65 - silc-client 1.1~beta6-1 (embed)
66
67 icclib
68 - ghostscript <unfixed> (embed)
69 - argyll <unfixed> (embed)
70
71 dietlibc
72 - ccontrol 0.9.1+20071204-1 (static)
73
74 libmikmod
75 - sdl-mixer1.2 <unfixed> (embed)
76 TODO: report bug
77
78 libiax
79 - iaxmodem <unfixable> (embed; bug #548885)
80
81 spandsp
82 - iaxmodem <unfixable> (embed; bug #548885)
83
84 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85 - dpkg <unfixed> (embed)
86 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87 - rsync <unfixed> (embed)
88 NOTE: somehow derived code base
89 - mono <unfixed> (embed)
90 TODO: check mozilla
91 - Linux kernels <unfixed> (embed)
92 - pvpgn 1.7.8-2 (embed)
93 - mrtg 2.12.2-1 (embed)
94 - rpm <unknown> (embed)
95 NOTE: pinged anibal since when rpm was fixed
96 - tuxcmd-modules <unfixed> (embed)
97 - zsync <unfixed>
98 - tra <unfixed>
99 - sash <unfixed>
100 - nsis <unfixed>
101 - mseide-msegui <unfixed>
102 NOTE: mseide
103 - mirrordir <unfixed>
104 - poco <unfixed>
105 - klibc <unfixed>
106 - ghostscript <unfixed>
107 - freeimage <unfixed>
108 - clamav <unfixed> (fork)
109 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110 - tuxonice-userui <unfixed>
111 - plt-scheme <unfixed>
112 - perl <unfixed>
113 - paraview <unfixed>
114 - gcvs <unfixed>
115 - dump <unfixed>
116 - aide <unfixed> (static)
117 - dar <unfixed> (static)
118 - avfs <unfixed>
119 - fpc <unfixed>
120 - winff <unfixed>
121 NOTE: inherited from fpc, see #472304
122 - lazarus <unfixed>
123 NOTE: inherited from fpc, see #472304
124 - erlang <unfixed> (embed)
125 - gamera 3.2.3-1 (embed)
126 - python2.4 <unfixed> (embed; bug #553403)
127 - python2.5 <unfixed> (embed; bug #553403)
128
129 dulwich
130 - hg-git 0.1.0-1 (embed; bug #541996)
131
132 libvigraimpex
133 - hugin <unfixed> (embed; bug #542259)
134 - enblend-enfuse <unfixed> (embed; bug #542258)
135 - gamera 3.2.3-1 (embed)
136
137 libbz2
138 - dpkg <unfixed> (static)
139
140 libgadu
141 - centericq <unfixed> (embed)
142 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144 - kdenetwork 4:3.3.2-5 (embed)
145 NOTE: from kdenetwork: kopete
146 - ekg 1:1.8~rc0-1 (embed)
147 - kadu 0.6.0.2-3 (embed; bug #504430)
148 - gadu <itp> (embed)
149
150 xmlrpc (which package is the "origin" of this code?)
151 - drupal <unfixed> (embed)
152 - phpgroupware <unfixed> (embed)
153 - egroupware <unfixed> (embed)
154 - phpwiki <unfixed> (embed)
155 - php4 <unfixed> (embed)
156 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157
158 shtool (affects build-time only)
159 - mysql-ocaml <unfixed> (embed)
160 - php4 <unfixed> (embed)
161
162 iceape
163 - iceweasel <unfixed> (fork)
164 - icedove <unfixed> (fork)
165 - xulrunner <unfixed> (fork)
166 - kompozer <unfixed> (embed; bug #532168)
167 - galeon <unfixed> (fork)
168 - epiphany-browser <unfixed> (fork)
169 - conkeror <unfixed> (fork)
170 - kazehakase <unfixed> (fork)
171
172 xli
173 - xloadimage <unfixed> (embed)
174
175 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
176 - openmotif <unfixed> (embed)
177 - libxpm <unfixed> (embed)
178
179 kerberized apps with BSD origin
180 - krb4 <removed> (embed)
181 - krb5 <unfixed> (embed)
182 - heimdal <unfixed> (embed)
183
184 grip (which pkg is the origin?)
185 - libcdaudio <unfixed>
186 - grip <unfixed>
187 - gnome-vfs <unfixed>
188 TODO: check vfs2 as well
189
190 fudforum
191 [etch] - phpgroupware <unfixed> (embed)
192 NOTE: phpgroupware-fudforum
193 [sarge] - egroupware-fudforum <removed> (embed)
194
195 libbsd
196 - rdate 1:1.2-3 (embed)
197 - atheme-services <unfixed>
198 - libbsd-arc4random-perl <unfixed>
199 - isakmpd <unfixed>
200
201 cvs
202 - gcvs <unfixed> (embed)
203 NOTE: see cvsunix/src in tarball
204
205 pcre3
206 - php4 <unknown> (embed)
207 - analog 2:5.23-0woody1 (embed)
208 - goffice <unfixed> (embed)
209 NOTE: libgoffice-*
210 - vfu 4.06-4.1 (embed; bug #450754)
211 - tf5 5.0beta7-1 (embed)
212 - monotone 0.43-1 (embed)
213 NOTE: this only affects versions >= 0.37
214 - glib2.0 2.15.2-1 (embed)
215 - apache2 2.0.53-4 (embed)
216 - exim4 4.10-0.srh20.12 (embed)
217 - yacas <unfixed> (embed)
218 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
219 - gtamsanalyzer.app 0.42-5 (embed)
220 - tin 980117-1 (embed)
221 - kazehakase 0.5.2-1
222 - webkit 1.0.1-1 (embed)
223 - qt4-x11 <unfixed> (embed)
224 NOTE: embedded via webkit copy
225 - erlang <unfixed> (embed)
226
227 tiff
228 - wxwindows2.4 2.2.1 (embed)
229 - gamera 3.2.3-1 (embed)
230
231 uudeview
232 - libconvert-uulib-perl <unfixed> (embed)
233 - pan <unfixed> (embed)
234
235 sqlite (not affected by security vulnerabilities so far)
236 - amarok <unfixed> (embed)
237 - monotone 0.43-1 (embed)
238 - iceweasel <unfixed> (embed)
239
240 util-linux/mount
241 - loop-aes-utils <unfixed> (embed)
242 NOTE: contains code from util-linux' mount in the mount-aes-udeb
243
244 sylpheed
245 - sylpheed-claws <unfixed> (fork)
246
247 phpsysinfo
248 - egroupware <unfixed> (embed)
249 - phpgroupware <unfixed> (embed)
250
251 phpldapadmin
252 [sarge] - egroupware <unfixed> (embed)
253 NOTE: removed from egroupware after sarge
254
255 chmlib
256 - kchmviewer <unknown> (embed)
257
258 ffmpeg (libavcodec/libavformat)
259 - mplayer 1.0~rc2-14 (embed; bug #395252)
260 - kino 1.0.0-1
261 - vlc <not-affected> (Links dynamically since initial release)
262 - smilutils 0.3.0-10
263 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
264 - motion 3.1.19-1
265 - gstreamer0.10-ffmpeg 0.10.3-2
266 - xmovie <removed> (static)
267 TODO: gimp-gap (potentially using ffmpeg code as well)
268 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
269
270 faad2
271 - mplayer 1.0~rc2-20 (embed)
272 - avifile <unfixed> (embed; bug #538750)
273 - ffmpeg-debian <removed> (old-version)
274
275 libmad (MPEG decoding lib)
276 - xine-lib <unfixed> (embed)
277 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
278 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
279
280 libdts
281 - xine-lib <unfixed> (embed)
282
283 flac
284 - xine-lib <unfixed> (embed)
285
286 liba52
287 - a52dec <unfixed> (embed)
288 - xine-lib <unfixed> (embed)
289
290 libmpeg2
291 - mpeg2dec <unfixed> (embed)
292 - xine-lib <unfixed> (embed)
293
294 libntlm
295 - wget <unfixed> (fork; bug #550436)
296 - curl <unfixed> (fork; bug #550437)
297 - cntlm <unfixed> (fork; bug #550438)
298
299 uw-imap
300 - pine <unfixed> (embed)
301 - alpine <unfixed> (embed)
302
303 imagemagick
304 - graphicsmagick <unfixed> (fork)
305
306 python-urlgrabber
307 - mercurial <unfixed> (embed; bug #531062)
308 - w3af <unfixed> (embed; bug #555372)
309 [experimental] - harvestman <unfixed> (embed; bug #555373)
310
311 beautifulsoup
312 - python-mechanize <unfixed> (embed; bug #555349)
313 - zope2.11 <unfixed> (embed; bug #555350)
314 - twill <unknown> (embed)
315
316 halibut
317 - nsis <unfixed> (fork)
318
319 libghttp
320 - hotway <unfixed> (embed)
321
322 libsndfile
323 - ardour 1:2.7.1-1 (embed)
324
325 glibmm2.4
326 - ardour 1:2.7.1-1 (embed)
327
328 libgnomecanvasmm2.6
329 - ardour 1:2.7.1-1 (embed)
330
331 libsigc++-2.0
332 - ardour 1:2.7.1-1 (embed)
333
334 soundtouch
335 - ardour 1:2.7.1-1 (embed)
336
337 libmms
338 - xine-lib <unfixed> (embed)
339 - mimms <unfixed> (embed)
340
341 fckeditor
342 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
343 - moin 1.8.2-2 (embed; bug #452599)
344 - karrigell <removed> (embed; bug #452598)
345 - gforge 4.6.99+svn6225-1 (embed)
346 - request-tracker3.8 <unfixed> (embed)
347
348 ipatlas (not packaged in Debian)
349 - moodle <unfixed> (embed; bug #507185)
350
351 libphp-phpmailer
352 - moodle <unfixed> (embed; bug #507185)
353 - mahara <unfixed> (embed)
354 - symfony <unfixed> (embed)
355 [etch] - phpgroupware <unfixed> (embed)
356 NOTE: phpgroupware-felamimail is only in etch
357 - egroupware <unfixed> (embed; bug #504283)
358 - glpi <unfixed>
359
360 htmlArea (not packaged in Debian)
361 - moodle <unfixed> (embed)
362
363 giflib
364 - wine <unfixed> (embed; bug #466181)
365
366 bennu (not packaged in Debian, http://bennu.sourceforge.net)
367 - moodle <unfixed> (embed)
368
369 smarty
370 - moodle 1.8.2-2 (embed; bug #471158)
371 - gallery2 2.2.5-2 (embed; bug #471160)
372 - mahara 0.9.2-2 (embed; bug #471201)
373 - gosa 2.4beta1-1 (embed; bug #471200)
374
375 TinyMCE
376 - wordpress 2.5.1-3 (embed; bug #478257)
377 - moodle <unfixed> (embed; bug #507185)
378 - knowledgeroot <unfixed> (embed)
379 - joomla <itp> (bug #326398)
380
381 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
382 - scite <unfixed> (embed)
383 - qscintilla <unfixed> (embed)
384 - qscintilla2 <unfixed> (embed)
385 - geany <unfixed> (fork)
386 - anjuta <unfixed> (embed)
387
388 libphp-adodb
389 - moodle <unfixed> (embed; bug #507185)
390 NOTE: also AdoDB-XML Schema
391 - gallery2 <unfixed> (embed)
392 - phppgadmin <unfixed> (embed)
393 - egroupware <unfixed> (embed)
394 - phpwiki <unfixed> (embed)
395 - torrentflux 2.0beta1-2 (embed)
396 - ipplan <unfixed> (embed)
397 - typo3-src <unfixed> (embed)
398 - cacti <unknown> (embed)
399 [sarge] - cacti <unfixed> (embed)
400 NOTE: dependency exists, but internal version is used
401 - gforge 4.7~rc2-6 (embed)
402 - mahara <unfixed> (embed)
403
404 gzip
405 - linux-kernel <unfixed> (embed)
406 NOTE: lib/inflate.c
407 - klibc <unfixed> (embed)
408 NOTE: based on linux-kernel gzip code
409 - busybox <unfixed> (embed)
410
411 neon
412 - cadaver 0.22.3+debian-1 (embed; bug #188381)
413 - gnome-vfs2 <unfixed> (embed; bug #395874)
414 [etch] - litmus <unfixed> (embed; #395875)
415 - litmus <removed> (embed; #395875)
416 [sarge] - screem <unfixed> (embed)
417 - sitecopy 1:0.16.3-5 (embed; bug #395876)
418 [etch] - tla <unfixed> (embed; bug #395877)
419 [sarge] - tla <unfixed> (embed; bug #395877)
420
421 libmodplug
422 - gst-plugins-bad0.10 <unfixed> (embed)
423
424 libvncserver
425 - vino <unfixed> (embed)
426
427 putty
428 - filezilla <unfixed> (embed)
429
430 tinyxml (not packaged in Debian; itp bug #531968)
431 - filezilla <unfixed>
432 - crystalspace <unfixed> (embed)
433 - libwfut <unfixed> (embed)
434 - rarian <unfixed> (embed)
435 - bulletml <unfixed> (embed)
436 - pokerth <unfixed> (embed)
437 - qutecom <unfixed> (embed)
438 - sofa-framework <unfixed> (embed)
439 - yate <unfixed> (embed)
440 - antigrav <unfixed> (embed)
441 - balder2d <unfixed> (embed)
442 - cal3d <unfixed> (embed)
443 - criticalmass <unfixed> (embed)
444 - ember <unfixed> (embed)
445 - epiphany <unfixed> (embed)
446 - gambit <unfixed> (embed)
447 - noiz2sa <unfixed> (embed)
448 - ogre <unfixed> (embed)
449 - opencity <unfixed> (embed)
450 - openmovieeditor <unfixed> (embed)
451 - pouetchess <unfixed> (embed)
452 - tecnoballz <unfixed> (embed)
453 - trigger-rally <unfixed> (embed)
454 - xmoto <unfixed> (embed)
455 - mapnik <unknown> (embed)
456 NOTE: uses a different XML parser by default
457 - rrootage 0.23a-6 <embed>
458 NOTE: links to libbulltetml
459 - boson <unknown> (embed)
460 NOTE: the embedded code is unused
461
462 gv
463 - evince <unfixed> (embed)
464 NOTE: ps/ tree from gv 3.5.8
465 NOTE: evince-gtk is affected (a component of evince source package)
466
467 libXbae
468 - paw <removed> (embed)
469 [etch] - paw <unfixed> (embed)
470
471 libgtkhtml
472 - claws-mail-extra-plugins <unfixed> (fork)
473
474 libXaw
475 - paw <removed> (embed)
476 [etch] - paw <unfixed> (embed)
477 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
478
479 libgd2
480 - graphviz <unfixed> (embed)
481 NOTE: lib/gd seems to be 2.0.33
482 - wml <unfixed> (embed)
483 - libwmf <unfixed> (embed)
484 NOTE: derived from gd 1.6.3
485
486 rar
487 - unrar-nonfree <unfixed> (embed)
488
489 unrar-free (maybe this code is derived from the original rar, too?)
490 - clamav <unfixed> (embed)
491 NOTE: seems to be disabled in default config
492
493 mplayer (DirectMedia Object loader)
494 - xine-lib <unfixed> (embed)
495 NOTE: src/libw32dll/
496 - vlc <unfixed> (embed)
497 NOTE: modules/codec/dmo/
498 - mplayer 1.0~rc2-20 (embed)
499
500 libwpd (WordPerfect converter)
501 - openoffice.org <unfixed> (embed)
502
503 fsplib (http://sourceforge.net/projects/fsp/)
504 - gftp <unfixed> (embed)
505 NOTE: lib/fsplib version 0.3
506
507 sprng
508 - tree-puzzle <unfixed> (embed)
509
510 librpcsecgss
511 - krb5 <unfixed> (embed)
512
513 jasper
514 - ghostscript <unfixed> (embed)
515 - gs-gpl <unfixed> (embed)
516
517 libiris
518 - psi <unfixed> (embed)
519 - kdenetwork <unfixed> (embed)
520 NOTE: kopete embeds libiris but links dynamically to libidn
521 - kdegames <unfixed> (embed)
522 NOTE: ksirk/kde4
523
524 libidn
525 - monotone 0.43-1 (embed)
526 - psi <unfixed> (embed)
527 NOTE: psi embeds libiris which embeds libidn
528 - kdegames <unfixed> (embed)
529 NOTE: kdegames/kde4 embeds libiris which embeds libidn
530
531 liblua
532 - monotone 0.43-1 (embed)
533 - nmap 5.00-1 (embed; bug #527997)
534 [lenny] - nmap <unfixed> (embed; bug #527997)
535 - ocropus <unfixed> (embed)
536
537 libbotan
538 - monotone 0.43-1 (embed)
539
540 NetXX
541 - monotone 0.43-1 (embed)
542
543 libgc
544 - mono <unfixed> (embed)
545
546 lzma
547 - p7zip <unfixed> (embed)
548 - xz-utils <unfixed> (fork)
549
550 lzo
551 - grub2 <unfixed> (embed)
552
553 yassl
554 - mysql-dfsg-5.0 <unfixed> (embed)
555
556 pax code
557 - tar <unfixed> (embed)
558 - cpio <unfixed> (embed)
559
560 t1lib
561 - tetex-bin 2.0.2-1 (embed)
562 - texlive-bin <unknown> (embed)
563
564 guichan
565 - boswars <unfixed> (embed)
566 NOTE: maintainer notified us, working on it
567
568 tolua
569 - boswars <unfixed> (embed)
570 NOTE: maintainer notified us, working on it
571 - ocropus <unfixed> (embed)
572 - freeciv <unfixed> (embed)
573
574 asio-dev
575 - luxrender <removed> (embed)
576
577 xine-lib
578 - vlc <unfixed> (embed)
579 NOTE: only parts included in modules/access/rtsp
580
581 netpbm
582 - tcl8.3 <unfixed> (embed)
583 - tcl8.4 <unfixed> (embed)
584 - tcl8.5 <unfixed> (embed)
585 NOTE: generic/tkImgGIF.c
586
587 tk8.5
588 - tk8.0 <removed> (old-version)
589 - tk8.3 <unfixed> (old-version)
590 - tk8.4 <unfixed> (old-version)
591 - perl-tk <unfixable> (fork)
592
593 samba
594 - mc 2:4.6.2~git20080311-1 (embed)
595 NOTE: maintainer is aware of this, currently searching a solution
596
597 plib1.8.4c2
598 - boson <unfixed> (fork)
599 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
600
601 fribidi
602 - quesoglc <unfixed> (embed)
603 NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
604
605 glew
606 - quesoglc <unfixed> (embed; bug #489341)
607 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
608 - trigger <unfixed> (embed)
609 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
610 - trigger-rally <unfixed> (embed)
611 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
612
613 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
614 - transcend <unfixed> (embed)
615 - cultivation <unfixed> (embed)
616 - passage <unfixed> (embed)
617 - gravitation <unfixed> (embed)
618
619 tar
620 - libarchive <unfixed> (embed)
621 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
622
623 cpio
624 - libarchive <unfixed> (embed)
625 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
626
627 webkit
628 - qt4-x11 <unfixed> (embed)
629
630 ftgl
631 - blender 2.46+dfsg-1 (embed)
632
633 wv
634 - abiword <unfixed>
635
636 qemu
637 - kvm <unfixed> (embed; bug #543159)
638 - xen-3 <unfixed> (embed)
639 - xen-unstable <unfixed> (embed)
640
641 vgabios
642 - kvm <unfixed> (embed; bug #489442)
643
644 bochs
645 - kvm <unfixed> (embed; bug #489442)
646
647 speex
648 - vorbis-tools <unfixed> (embed)
649 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
650 - gst-plugins-good0.10 <unfixed> (embed)
651 - xine-lib <unfixed> (embed)
652 - libfishsound <unfixed> (embed)
653 - libannodex <unfixed> (embed)
654 - vlc <unfixed> (embed)
655 - xmms-speex <unfixed> (embed)
656 - libsdl-sound1.2 <unfixed> (embed)
657 - sweep <unfixed> (embed)
658
659 libreadline
660 - magic <itp> (old-version)
661
662 opcode
663 - ode <unfixed> (embed)
664 NOTE: opcode is not a package in debian, it is just embedded
665 NOTE: http://www.codercorner.com/Opcode.htm
666
667 gimpact
668 - ode <unfixed> (embed)
669 NOTE: gimpact is not a package in debian, it is just embedded
670 NOTE: http://gimpact.sf.net
671
672 mochikit
673 - mahara <unfixed> (embed)
674 NOTE: they require extra patches, still unmerged upstream
675 - ntop <unfixed> (embed)
676 - coherence 0.6.2-1 (embed)
677 - paste <unfixed> (embed)
678 - turbogears <unfixed> (embed)
679 - plone3 <unfixed> (embed)
680 - xulrunner <unfixed> (embed)
681 - libjifty-plugin-chart-perl <unfixed> (embed)
682 - sabnzbdplus <unfixed> (embed)
683 - tgmochikit <unfixed> (embed)
684
685 prototypejs
686 - netbeans-ide 6.0.1+dfsg-2 (embed)
687 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
688 - webcit <unfixed> (embed; bug #555219)
689 - asterisk 1:1.6.2.0~rc3-1 (embed)
690 - libjson-ruby 1.1.4-1 (embed; bug #555224)
691 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
692 - horde3 <unfixed> (embed)
693 - knowledgeroot <unfixed> (embed; bug #555230)
694 - mediatomb <unfixed> (embed; bug #555233)
695 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
696 - ebug-http <unfixed> (embed; bug #555236)
697 - phpgedview <removed> (embed)
698 - poker-network <unfixed> (embed; bug #555238)
699 - rails 2.1.0-6 (embed)
700 - wordpress 2.5.0-2 (embed; bug #555243)
701 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
702 TODO: search through all of the other zope packages
703 - ampache 3.4.1-2 (embed)
704 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
705 - hobix 0.5~svn20070319-4 (embed; bug #555247)
706 - zabbix 1.6.6-4 (embed; bug #555250)
707 - chora2 <unfixed> (embed; bug #555253)
708 - gollem <unfixed> (embed; bug # 555254)
709 - jscropperui 1.2.1-1 (embed; bug #555257)
710 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
711 - ingo1 <unfixed> (embed; bug #555261)
712 - kronolith2 <unfixed> (embed; bug #555262)
713 - activeldap <unfixed> (embed)
714 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
715 - mantis <unfixed> (embed; bug #555265)
716 - otrs2 2.3.4-6 (embed; bug #555267)
717 - webcalendar <unfixed> (embed; bug #555269)
718 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
719 - jifty 0.90519-1 (embed; bug #555271)
720 - jquery <unfixed> (embed; bug #555272)
721 - passenger 2.2.5debian1-1 (embed; bug #555273)
722 - plone3 <unfixed> (embed; bug #555275)
723 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
724 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
725 - xulrunner <unfixed> (embed)
726 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
727
728 gdb
729 - insight <unfixed> (embed)
730
731 e2fsprogs
732 - ldiskfsprogs <unfixable> (fork)
733
734 quazip (not packaged in Debian)
735 - qcake <unfixed> (embed)
736 NOTE: starting with upstream version 0.6.4
737
738 exo
739 - pcmanfm <unfixed> (embed; bug #499677)
740 NOTE: slightly modified source code
741
742 java
743 - openjdk-6 <unfixed>
744 - sun-java5 <unfixed>
745 - sun-java6 <unfixed>
746
747 libphp-snoopy
748 - ampache 3.4.1-2 (embed; bug #504169)
749 - gforge 4.6.99+svn6094-2 (embed)
750 - mahara 1.0.5-2 (embed; bug #504170)
751 - pixelpost 1.7.1-5 (embed; bug #504171)
752 - mediamate 0.9.3.6-5 (embed; bug #504172)
753 - opendb <removed> (embed; bug #504173)
754 [etch] - opendb <unfixed> (embed; bug #504173)
755 - wordpress 2.5.1-9 (embed; bug #443948)
756 - moodle <unfixed> (embed; bug #507185)
757 [etch] - phpgroupware <unfixed> (embed)
758 NOTE: phpgroupware-felamimail
759 - magpierss 0.72-3 (embed; bug #431089)
760
761 jquery
762 - zekr <unfixed> (embed)
763 - wordpress <unknown> (embed)
764 - yocto-reader <unfixed> (embed)
765 - textpattern <unfixed> (embed)
766 - genshi 0.5.1-1 (embed)
767 NOTE: compressed file under examples/ dir
768 - prewikka <unfixed> (embed)
769 - libramaze-ruby <unfixed> (embed)
770 - drupal5 <unfixed> (embed)
771 - b2evolution <unfixed> (embed)
772 - wesnoth <unfixed> (embed)
773
774 tablesorter (jquery plugin, not packaged yet)
775 - wesnoth <unfixed> (embed)
776
777 kses
778 - wordpress <unfixed> (embed; bug #504242)
779 NOTE: their copy has all methods renamed to wp_<foo>
780 NOTE: kses isn't in Debian, RFP: #504240
781 - moodle <unfixed> (embed; bug #507185)
782 - egroupware <unfixed> (embed)
783
784 magpierss
785 - wordpress <unfixed> (embed; bug #504242)
786 - moodle <unfixed>
787
788 php-gettext
789 - wordpress 2.8.4-1 (embed; bug #504242)
790
791 libphp-ixr (name may change, it is the Incutio XML-RPC)
792 - wordpress <unfixed> (embed; bug #504242)
793 NOTE: libphp-ixr isn't in Debian, RFP: #504236
794 - dokuwiki <unfixed> (embed)
795 - textpattern <unfixed> (embed)
796
797 libphp-cas
798 - glpi <unfixed> (embed)
799 - moodle <unfixed> (embed; bug #505984)
800
801 scriptaculous (prototype.js is among the embeds in the following)
802 - glpi <unfixed> (embed)
803 - libaws <unfixed> (embed; bug #555222)
804 - op-panel <unfixed> (embed)
805 - symfony <unfixed> (embed)
806 NOTE: maintainer says there are extra incompatible changes required
807 - pixelpost 1.7.1-6 (embed)
808 - webhelpers <unfixed> (embed)
809 - qwik <unfixed> (embed; bug #555241)
810 - smokeping <unfixed> (embed)
811 - turba2 <unfixed> (embed)
812 - typo3-src 4.2.3-1 (embed)
813 - request-tracker3.6 <unfixed> (embed)
814 - request-tracker3.8 <unfixed> (embed)
815 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
816 - wordpress 2.5.0-2 (embed)
817 - libhtml-prototype-perl 1.48-3 (embed)
818
819 libmarkdown-php
820 - moodle <unfixed> (embed; bug #507185)
821 - pixelpost 1.7.1-6 (embed)
822
823 php-openid
824 - wordpress-openid <itp> (embed)
825
826 geshi
827 - dokuwiki 0.0.20080505-3.1 (embed)
828 - pgfouine 1.0-1.1 (embed)
829 - websvn 2.1.0-1 (embed)
830
831 webcalendar
832 - gforge 4.7~rc2-6 (embed; bug #504758)
833
834 libical
835 - kdepim <unfixed> (fork)
836 - kdepimlibs <unfixed> (fork)
837 NOTE: fixed in KDE4 post 4.1.x series
838 - claws-mail-extra-plugins <unfixed> (fork)
839
840 libltdl3
841 - kdelibs <unfixed> (embed)
842 NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
843 - synfig <unfixed> (embed)
844
845 harfbuzz
846 - qt4-x11 <unfixed> (embed)
847
848 libzip
849 - php5 <unfixed> (fork)
850 - odt2txt <unfixed> (embed; bug #523808)
851
852 json.php (not packaged; should be replaced with php's built-in functions)
853 - moodle <unfixed>
854 - yui <unfixed>
855 - gallery2 <unfixed>
856 - dokuwiki <unfixed>
857 - typo3-src <unfixed>
858
859 php-fpdf
860 - tcpdf <itp> (fork)
861 - moodle <unfixed>
862 - phpwiki <unfixed>
863 - egroupware <unfixed>
864 - ldap-account-manager <unfixed> (fork)
865
866 tcpdf (itp: #495985)
867 - moodle <unfixed>
868 - phpmyadmin <unfixed>
869
870 typo3
871 - moodle <unfixed>
872
873 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
874 - moodle <unfixed>
875 - gosa <unfixed>
876
877 php-ole (itp: #487558)
878 - moodle <unfixed>
879
880 pieforms (http://www.catalyst.net.nz)
881 - mahara <unfixed>
882
883 savant2 (http://phpsavant.com)
884 - egroupware <unfixed>
885
886 rssparser (http://nwow.org)
887 - egroupware <unfixed>
888 - phpgroupware <unfixed>
889
890 lcms
891 - openjdk-6 <unfixed> (fork)
892
893 libphp-phplayersmenu
894 - diogenes <unfixed>
895 - phpldapadmin <unfixed>
896
897 libphp-pclzip
898 - docvert <unfixed>
899 - moodle <unfixed>
900 - egroupware <unfixed>
901
902 libphp-simplepie
903 - dokuwiki <unfixed>
904
905 libphp-jpgraph
906 - egroupware <unfixed>
907
908 php-simpletest
909 - moodle <unfixed>
910
911 libpng
912 - iceweasel <not-affected> (uses xulrunner)
913 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
914 - iceape 1.0.13~pre080614i-0etch1 (embed)
915 - xulrunner 1.9.0.13-1 (embed)
916 [lenny] - xulrunner 1.9.0.11-0lenny1
917 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
918 - gamera 3.2.3-1 (embed)
919
920 irssi
921 - silc-client <unfixed> (embed)
922 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
923
924 extc
925 - mtasc <unfixed> (embed)
926 - haxe <unfixed> (embed)
927
928 swflib
929 - mtasc <unfixed> (embed)
930 - haxe <unfixed> (embed)
931
932 libitext-java
933 - bouncycastle 2.1.4-1 (embed)
934
935 python-ply
936 - pyke <unfixed> (embed; bug #555363)
937 - pywbem <unfixed> (embed; bug #555364)
938 - sepolgen <unfixed> (embed; bug #555365)
939 - zope-textindexng3 <unknown> (embed)
940 - iceweasel <not-affected> (uses xulrunner)
941 - xulrunner <unknown> (embed)
942 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
943
944 libdumbnet (libdnet upstream)
945 - nmap <unfixed> (fork)
946
947 gcc-4.4
948 - gcc-mingw32 <unfixed> (embed)
949
950 camlimages
951 - advi <unfixed> (static; bug #550441)
952
953 memcached
954 - memcachedb <unfixed> (embed)
955
956 yajl
957 - argyll <unfixed> (embed; bug #544223)
958 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
959
960 nusoap
961 - gforge 4.8.2-1 (embed)
962
963 libept
964 - adept <unfixed> (embed; bug #540649)
965
966 libvorbis
967 - iceweasel <not-affected> (uses xulrunner)
968 - xulrunner <unfixed> (embed; bug #540959)
969 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
970 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
971 - iceape <unfixed> (embed)
972 [etch] - iceape <not-affected> (introduced in 2.0)
973 [lenny] - iceape <not-affected> (introduced in 2.0)
974
975 cairo
976 - iceweasel <not-affected> (uses xulrunner)
977 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
978
979 liboggz
980 - iceweasel <not-affected> (uses xulrunner)
981 - xulrunner <unfixed> (embed; bug #540959)
982 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
983 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
984 - iceape <unfixed> (embed)
985 [etch] - iceape <not-affected> (introduced in 2.0)
986 [lenny] - iceape <not-affected> (introduced in 2.0)
987
988 liboggplay
989 - iceweasel <not-affected> (uses xulrunner)
990 - xulrunner <unfixed> (embed; bug #540959)
991 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
992 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
993 - iceape <unfixed> (embed)
994 [etch] - iceape <not-affected> (introduced in 2.0)
995 [lenny] - iceape <not-affected> (introduced in 2.0)
996
997 php-net-dnsbl
998 - serendipity <unfixed> (embed)
999
1000 php-onyx-rss
1001 - serendipity <unfixed> (embed)
1002
1003 php-text-wiki
1004 - serendipity <unfixed> (embed)
1005
1006 php-xml-rpc
1007 - serendipity <unfixed> (embed)
1008
1009 polarssl (does not have a shared library)
1010 - pdkim <itp> (embed; bug #543150)
1011 - xyssl <unfixed> (old-version)
1012
1013 pidgin
1014 - gaim <removed> (old-version)
1015
1016 icu
1017 - webkit 1.0.1-1 (embed; bug #547214)
1018 - texlive-bin <unfixed> (fork)
1019 NOTE: texlive upstream working with icu upstream to merge their changes
1020
1021 cyrus-imapd-2.2
1022 - kolab-cyrus-imapd <unfixed> (fork)
1023 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1024
1025 python-cxx-dev
1026 - freecad <unfixed> (embed; bug #547936)
1027
1028 libzipios++-dev
1029 - freecad <unfixed> (embed; bug #547941)
1030
1031 linux-2.6
1032 - kvm <unfixed> (embed; bug #549973) [./kernel/*]
1033 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1034 - kernel-source-2.6.8 <removed> (old-version)
1035 - kernel-source-2.4.27 <removed> (old-version)
1036 - kernel-source-2.4.24 <removed> (old-version)
1037 - kernel-source-2.2.25 <removed> (old-version)
1038 - kernel-source-2.2.20 <removed> (old-version)
1039
1040 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1041 - kvm <unfixed> (embed) [./libfdt/*]
1042
1043 qweb (not packaged)
1044 - ajaxterm <unfixed>
1045
1046 opensaml2
1047 - opensaml <removed> (old-version)
1048
1049 shibboleth-sp2
1050 - shibboleth-sp <removed> (old-version)
1051
1052 tuxonice-userui
1053 - suspend2-userui <removed> (old-version)
1054
1055 expat
1056 - w3c-libwww <removed> (embed; bug #551941)
1057 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1058 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1059 - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1060 - python2.4 <unfixed> (embed; bug #553403)
1061 - wxwindows2.4 <removed> (embed)
1062 - wxwidgets2.6 <unfixed> (embed)
1063 - wxwidgets2.8 <unfixed> (embed)
1064 - celementtree <unfixed> (embed)
1065 - audacity <unfixed> (embed)
1066 - matanza <unfixed> (embed)
1067 - tdom <unfixed> (embed)
1068 - udunits <unfixed> (embed)
1069 - apr-util 1.2 (embed)
1070 - ayttm <unfixed> (embed)
1071 - cableswig <unfixed> (embed)
1072 - cadaver <unfixed> (embed)
1073 - cmake <unfixed> (embed)
1074 - coin3 <unfixed> (embed)
1075 - gdcm <unfixed> (embed)
1076 - ghostscript <unfixed> (embed)
1077 - grmonitor <unfixed> (embed)
1078 - iceape <unfixed> (embed)
1079 - insighttoolkit <unfixed> (embed)
1080 - libparagui1.1 <unfixed> (embed)
1081 - paraview <unfixed> (embed)
1082 - poco <unfixed> (embed)
1083 - simgear <unfixed> (embed)
1084 - sitecopy <unfixed> (embed)
1085 - smart 1.0-1 (embed)
1086 [etch] - smart <unfixed> (embed)
1087 - swish-e <unfixed> (embed)
1088 - tla <unfixed> (embed)
1089 - vtk <unfixed> (embed)
1090 - wbxml2 <unfixed> (embed)
1091 - xmlrpc-c <unfixed> (embed)
1092 - iceweasel <unfixed> (embed)
1093 - kompozer <unfixed> (embed)
1094 - vxl <unfixed> (embed)
1095 - xulrunner <unfixed> (embed)
1096 - apache2 2.2 (embed)
1097 - texlive-bin <unfixed> (embed) [included twice]
1098 - vnc4 <unfixed> (embed)
1099 - xotcl <unfixed> (embed)
1100
1101 xerces-c
1102 - xerces-c2 <unfixed> (old-version)
1103 - xerces27 <removed> (old-version)
1104
1105 md5 (RSA's version; not the gnu version provided by coreutils)
1106 - w3c-libwww <removed> (embed; bug #551942)
1107 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1108
1109 enet
1110 - sauerbraten <unfixed> (embed; #497194)
1111
1112 eglibc
1113 - glibc <removed> (old-version)
1114
1115 galib
1116 - gamera 3.2.3-1 (embed)
1117
1118 configobj
1119 - bzr <unfixed> (embed; bug #555336)
1120 - elisa <unfixed> (embed; bug #555337)
1121 - gaupol <unfixed> (embed; bug #555338)
1122 - ipython <unfixed> (embed; bug #555339)
1123 - pida <unfixed> (embed; bug #555340)
1124 - psychopy <unfixed> (embed; bug #555341)
1125 - rest2web <unfixed> (embed; bug #555342)
1126 - auth2db <unknown> (embed)
1127 - dynagen <unknown> (embed)
1128 - iceweasel <unknown> (embed)
1129 - sabnzbdplus <unknown> (embed)
1130 - xulrunner <unknown> (embed)
1131 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1132
1133 python-clientform
1134 - bibus <unfixed> (embed; bug #555332)
1135 - zope2.10 <unfixed> (embed; bug #555333)
1136 - zope2.11 <unfixed> (embed; bug #555334)
1137 - python-mechanize <unknown> (embed)
1138 - twill <unknown> (embed)
1139
1140 python-mechanize
1141 - zope2.10 <unfixed> (embed; bug #555337)
1142 - zope2.11 <unfixed> (embed; bug #555338)
1143 - twill <unknown> (embed; bug #555339)
1144
1145 pexpect
1146 - duplicity 0.6.06-1 (embed; bug #555361)
1147 - hplip <unfixed> (embed; bug #555362)
1148 - smart <unfixed> (embed; bug #555363)
1149
1150 pyparsing
1151 - bauble <unfixed> (embed; bug #555366)
1152 - boa-constructor 0.6.1-8 (embed; bug #555367)
1153 - calibre <unfixed> (embed; bug #555368)
1154 - matplotlib <unfixed> (embed; bug #531024)
1155 - zhpy <unfixed> (embed; bug #555370)
1156 - polybori <unknown> (embed)
1157 - python-whoosh <unknown> (embed)
1158 - twill <unknown> (embed)
1159 - zope-textindexng3 <unknown> (embed)
1160
1161 python-pysqlite2
1162 - python2.4 <unfixed> (embed; bug #553403)
1163 - python2.5 <unfixed> (embed; bug #553403)
1164
1165 celementtree
1166 - python2.5 <unfixed> (embed)
1167 - smart 1.0-1 (embed)
1168 [etch] - smart <unfixed> (embed)
1169
1170 elementtree
1171 - python2.5 <unfixed> (embed)
1172 - bzr <unfixed> (embed; bug #555343)
1173 - gedit 2.28.2-1 (embed; bug #555344)
1174 - smart 1.0-1 (embed)
1175 [etch] - smart <unfixed> (embed)
1176 - solfege <unfixed> (embed; bug #555345)
1177 - w3af <unfixed> (embed; bug #555346)
1178 - python-qt4 <unknown> (embed)
1179 - sphinx <unknown> (embed)
1180 - python-nltk <itp> (embed)
1181
1182 python2.5
1183 - python2.4 <unfixed> (old-version)
1184 - jython <unfixed> (embed)
1185 NOTE: embeds many stdlib modules
1186 - python-django <unfixed> (embed; bug #555419)
1187 NOTE: embeds stdlib modules: doctest, decimal
1188 - gamera 3.2.3-1 (embed)
1189 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1190 - boa-constructor <unfixed> (embed; bug #555426)
1191 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1192 - nicotine <unfixed> (embed; bug #555427)
1193 NOTE: embeds stdlib modules: ConfigParser
1194 - museek+ <unfixed> (embed; bug #555428)
1195 NOTE: embeds stdlib modules: ConfigParser
1196 - vegastrike-data <unfixed> (embed)
1197 NOTE: embeds many stdlib modules
1198 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1199 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1200 - config-manager <unfixed> (embed; bug #555423)
1201 NOTE: embeds stdlib modules: optparse
1202 - jhbuild 2.28.0-1 (embed; bug #555421)
1203 NOTE: embeds stdlib modules: optparse, subprocess
1204 - smart <unfixed> (embed; bug #555432)
1205 NOTE: embeds stdlib modules: optparse
1206 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1207 NOTE: embeds stdlib modules: doctest
1208 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1209 NOTE: embeds stdlib modules: doctest
1210 - distribute <unfixed> (embed)
1211 NOTE: embeds stdlib modules: doctest
1212 - python-setuptools <unfixed> (embed; bug #555435)
1213 NOTE: embeds stdlib modules: doctest
1214 - zope.testing <unfixed> (embed; bug #555436)
1215 NOTE: embeds stdlib modules: doctest
1216 - translate-toolkit <unfixed> (embed; bug #555422)
1217 NOTE: embeds stdlib modules: textwrap, contextlib
1218 - libtpclient-py <unfixed> (embed; bug #555424)
1219 NOTE: embeds stdlib modules: subprocess
1220 - grass <unfixed> (embed; bug #555425)
1221 NOTE: embeds stdlib modules: subprocess
1222 - coherence <unfixed> (embed; bug #555429)
1223 NOTE: embeds stdlib modules: uuid
1224 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1225 NOTE: embeds stdlib modules: uuid
1226 - setroubleshoot <unfixed> (embed; bug #555431)
1227 NOTE: embeds stdlib modules: uuid
1228 - linkchecker <unfixed> (embed; bug #555414)
1229 NOTE: embeds msgfmt.py script
1230 - imdbpy <unfixed> (embed)
1231 NOTE: embeds msgfmt.py script
1232 - kiwi <unfixed> (embed)
1233 NOTE: embeds msgfmt.py script
1234 - moin <unfixed> (embed)
1235 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1236 - plone3 <unfixed> (embed)
1237 NOTE: embeds msgfmt.py script
1238 - roundup <unfixed> (embed)
1239 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1240 - rednotebook <unfixed> (embed; bug #555415)
1241 NOTE: embeds msgfmt.py script
1242 - turbogears <unfixed> (embed)
1243 NOTE: embeds msgfmt.py script
1244 - elisa <unfixed> (embed)
1245 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1246 - calibre <unfixed> (embed)
1247 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1248 - mailman <unfixed> (embed; #555416)
1249 NOTE: embeds msgfmt.py script
1250 - python-docutils <unknown> (embed)
1251 NOTE: embeds stdlib modules: optparse, textwrap
1252 - python-imaging <unknown> (embed)
1253 NOTE: embeds stdlib modules: doctest
1254 - python-mechanize <unknown> (embed)
1255 NOTE: embeds stdlib modules: doctest
1256 - twill <unknown> (embed)
1257 NOTE: embeds stdlib modules: subprocess
1258 - zeroc-ice <unknown> (embed)
1259 NOTE: embeds stdlib modules: subprocess
1260 - wxwidgets2.8 <unknown> (embed)
1261 NOTE: embeds stdlib modules: subprocess
1262 - cycle <unknown> (embed)
1263 NOTE: embeds msgfmt.py script
1264 - deluge <unknown> (embed)
1265 NOTE: embeds msgfmt.py script
1266 - opendict <unknown> (embed)
1267 NOTE: embeds msgfmt.py script
1268 - openerp-client <unknown> (embed)
1269 NOTE: embeds msgfmt.py script
1270 - rapidsvn <unknown> (embed)
1271 NOTE: embeds msgfmt.py script
1272 - wammu <unknown> (embed)
1273 NOTE: embeds msgfmt.py script
1274 - gaphor <unknown> (embed)
1275 NOTE: embeds msgfmt.py script
1276 - pida <unknown> (embed)
1277 NOTE: embeds msgfmt.py script
1278 - python-formencode <unknown> (embed)
1279 NOTE: embeds msgfmt.py script
1280 - duplicity <unfixed> (embed)
1281 NOTE: embeds stdlib module: urlparse, tarfile
1282 - pygopherd <unfixed> (embed)
1283 NOTE: embeds stdlib module: zipfile
1284
1285 argparse
1286 - twill <unfixed> (embed; bug #555347)
1287 - ipython <unfixed> (embed; bug #555348)
1288
1289 coherence
1290 - elisa <unfixed> (embed; bug #555335)
1291
1292 simpletal
1293 - plastex <unfixed> (embed; bug #555371)
1294
1295 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1296 - postr <unfixed> (embed)
1297 - elisa <unfixed> (embed)
1298
1299 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1300 - apertium-tolk <unfixed> (embed)
1301 - ipython <unfixed> (embed)
1302 - virtaal <unfixed> (embed)
1303
1304 distribute
1305 - setuptools <removed> (old-version)
1306
1307 rails
1308 - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1309 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1310 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1311 - thin <unfixed> (embed) [./spec/rails_app/*]
1312 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1313 NOTE: be dangerous if developers are naively basing their code off of the examples
1314 NOTE: prototype.js is among the example files
1315
1316 lucene2 (prototype.js is among the embeds in the following)
1317 - lucene <unfixed> (old-version)
1318 - pylucene <unfixed> (embed)
1319 - libpdfbox-java <unfixed> (embed)
1320 - libfontbox-java <unfixed> (embed)
1321 - libjempbox-java <unfixed> (embed)
1322 - solr <unfixed> (embed)
1323
1324 unicode-data
1325 - syslinux <unfixed> (embed)
1326 - camomile <unfixed> (embed)
1327 - fribidi <unfixed> (embed)
1328 - m17n-db <unfixed> (embed)
1329 - sbcl <unfixed> (embed)
1330 - heimdal <unfixed> (embed)
1331 - icu <unfixed> (embed)
1332 - icu4j <unfixed> (embed)
1333 - krb5 <unfixed> (embed)
1334 - moodle <unfixed> (embed)
1335 - openldap <unfixed> (embed)
1336 - pike7.6 <unfixed> (embed)
1337 - samba <unfixed> (embed)
1338 - samba4 <unfixed> (embed)
1339 - cmucl <unfixed> (embed)
1340 - typo3-src <unfixed> (embed)
1341 - mauve <unfixed> (embed)
1342 - texlive-bin <unfixed> (embed)
1343 - ypsilon <unfixed> (embed)
1344 - jeuclid <unfixed> (embed)
1345 - charmap.app <unfixed> (embed)
1346 - clisp <unfixed> (embed)
1347 - gnulib <unfixed> (embed)
1348 - opensrs-client <unfixed> (embed)
1349 - saxonb <unfixed> (embed)
1350 - rails <unfixed> (embed)
1351
1352 feedparser
1353 - rawdog <unfixed> (embed; bug #383422)
1354 - miro <unfixed> (embed; bug #555351)
1355 - calibre <unfixed> (embed; bug #555352)
1356 - freevo <unfixed> (embed; bug #555353)
1357 - pida <unfixed> (embed; bug #555354)
1358 - planet-venus <unfixed> (embed; bug #555355)
1359 - plone3 <unfixed> (embed; bug #555356)
1360 - exaile 0.2.14+debian-1 (embed)
1361 - screenlets 0.1.2-3 (embed)
1362 NOTE: included twice
1363
1364 agg:
1365 - matplotlib <unfixed> (embed: bug #377271)
1366 - contextfree <unfixed> (embed)
1367 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1368 - exactimage <unfixed> (embed)
1369 - python-enable <unfixed> (embed)
1370 - mapnik 0.5.1-3 (embed)
1371 NOTE: links statically to agg, but shared library is not available (bug #377271)
1372
1373 vtk
1374 - paraview <unfixable> (embed; bug #495426)
1375
1376 txt2tags
1377 - rednotebook <unfixed> (embed)
1378
1379 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1380 - gajim <unfixed> (embed)
1381 - emesene <unfixed> (embed)
1382 - convirt <unfixed> (embed)
1383 - pida <unfixed> (embed)
1384 - rednotebook <unfixed> (embed)
1385
1386 horde3 (prototype.js is among the embeds in the following)
1387 - mnemo2 <unfixed> (embed)
1388 - nag2 <unfixed> (embed)
1389
1390 cimg
1391 - gmic <itp> (embed)
1392
1393 mootools
1394 - gmic <itp> (embed)
1395
1396 openldap
1397 - openldap2.3 <removed> (old-version)
1398
1399 grub2
1400 - grub <unfixed> (old-version)
1401
1402 gnupginterface
1403 - duplicity <unfixed> (embed)
1404
1405 python-dateutil
1406 - awn-extras-applets <unfixed> (embed)
1407 - matplotlib <unknown> (embed)
1408
1409 cups
1410 - cupsys <removed> (old-version)
1411
1412 yui
1413 - bcfg2 <not-affected> (present in source but not included in any binary files)
1414 - serendipity <unfixed> (embed; bug #557746)
1415 - moodle 1.8.2.dfsg-5 (embed)
1416 - jifty <unfixed> (embed; bug #557748)
1417 - webgui 7.7.26-1 (embed)
1418 - loggerhead 1.17-1 (embed)
1419
1420 quake3 (vanilla source not packaged in debian)
1421 - openarena <unfixable> (fork)
1422
1423 quake2 (vanilla source not packaged in debian)
1424 - alien-arena <unfixable> (fork)
1425 - warsow <unfixable> (fork)
1426
1427 libtheora
1428 - iceweasel <not-affected> (uses xulrunner)
1429 - xulrunner <unfixed> (embed; bug #540959)
1430 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1431 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1432 - iceape <unfixed> (embed; bug #559276)
1433 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1434 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1435
1436 dtoa
1437 - bfilter <unfixed> (embed)
1438 - cacao <unfixed> (embed)
1439 - cdrdao <unfixed> (embed)
1440 - classpath <unfixed> (embed)
1441 - freej <unfixed> (embed)
1442 - iceape <unfixed> (embed)
1443 - iceweasel <unfixed> (embed)
1444 - jscoverage <unfixed> (embed)
1445 - kde4libs <unfixed> (embed)
1446 - kdelibs <unfixed> (embed)
1447 - kompozer <unfixed> (embed)
1448 - libv8 <unfixed> (embed)
1449 - mono <unfixed> (embed)
1450 - newlib <unfixed> (embed)
1451 - nspr <unfixed> (embed)
1452 - php5 <unfixed> (embed)
1453 - polyml <unfixed> (embed)
1454 - qt4-x11 <unfixed> (embed)
1455 - rhino <unfixed> (embed)
1456 NOTE: code translated to Java
1457 - ruby1.8 <unfixed> (embed)
1458 - ruby1.9 <unfixed> (embed)
1459 - ruby1.9.1 <unfixed> (embed)
1460 - sdd <unfixed> (embed)
1461 - sfind <unfixed> (embed)
1462 - star <unfixed> (embed)
1463 - tinymux <unfixed> (embed)
1464 - virtualbox-ose <unfixed> (embed)
1465 - webkit <unfixed> (embed)
1466 - xulrunner <unfixed> (embed)
1467
1468 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1469 - firegpg <unfixed> (embed)
1470 - enigmail <unfixed> (embed)

  ViewVC Help
Powered by ViewVC 1.1.5