/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 13472 - (show annotations) (download)
Mon Dec 7 02:24:47 2009 UTC (3 years, 5 months ago) by gilbert-guest
File size: 42385 byte(s)
info for jasper, ghostscript, and vlc issues
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy, <unfixed>, <removed>,
14 <itp>, <not-affected>, <unknown> if the version number can not
15 be determined, or <unfixable> for unavoidable cases (e.g., forks
16 that add real value)
17 sort: static (linking statically against a lib)
18 embed (embedding a copy of the library into another source package)
19 fork (the package is not just embedding code but it is a fork and
20 thus might share parts of the source code)
21 old-version (the package is an older version of essentially
22 the same code)
23
24 The srcpkg might be some string to identify the code if there is no
25 specific source package.
26
27 Everything up to the next line is ignored.
28 ---BEGIN
29 xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30 NOTE: Fixed packages link to poppler library unless otherwise noted
31 - pdftohtml <unknown>
32 [sarge] - pdftohtml <unfixed>
33 [etch] - pdftohtml <unfixed>
34 NOTE: has been replaced by poppler-utils
35 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36 - texlive-base 3.0-12 (embed)
37 - texlive-bin 2007-1 (embed)
38 NOTE: links to poppler
39 - koffice <unfixed> (embed; bug #436163)
40 - libextractor 0.5.12-1 (embed)
41 NOTE: libextractor is using its own pdf decoder now
42 - ipe <unfixed> (embed)
43 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 - ruby-gnome2 <unknown> (embed)
45 NOTE: copy only present in source but links to poppler
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <unfixed> (embed; bug #551293)
48 - poppler <unfixable> (fork)
49
50 ppmd
51 - libcomplearn-mod-ppmd <unfixed> (fork)
52 NOTE: discussion in #458152
53
54 libevent
55 - transmission 1.71-1 (embed; bug #529372)
56
57 lrmi
58 - read-edid 2.0.0-1 (embed; bug #495131)
59 - s3switch <unfixed> (embed)
60 - xresprobe <unfixed> (embed)
61 - zhcon <unfixed> (embed)
62
63 peercast
64 - gnome-peercast <removed> (embed)
65 [etch] - gnome-peercast <unfixed> (embed)
66
67 silc-toolkit
68 - silc-client 1.1~beta6-1 (embed)
69
70 icclib
71 - ghostscript <unfixed> (embed)
72 - argyll <unfixed> (embed)
73
74 dietlibc
75 - ccontrol 0.9.1+20071204-1 (static)
76
77 libmikmod
78 - sdl-mixer1.2 <unfixed> (embed)
79 TODO: report bug
80
81 libiax
82 - iaxmodem <unfixable> (embed; bug #548885)
83
84 spandsp
85 - iaxmodem <unfixable> (embed; bug #548885)
86
87 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
88 - dpkg <unfixed> (static)
89 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
90 - rsync <unfixed> (embed)
91 NOTE: somehow derived code base
92 - mono <unfixed> (embed)
93 TODO: check mozilla
94 - Linux kernels <unfixed> (embed)
95 - pvpgn 1.7.8-2 (embed)
96 - mrtg 2.12.2-1 (embed)
97 - rpm <unknown> (embed)
98 NOTE: pinged anibal since when rpm was fixed
99 - tuxcmd-modules <unfixed> (embed)
100 - zsync <unfixed>
101 - tra <unfixed>
102 - sash <unfixed>
103 - nsis <unfixed>
104 - mseide-msegui <unfixed>
105 NOTE: mseide
106 - mirrordir <unfixed>
107 - poco <unfixed>
108 - klibc <unfixed>
109 - ghostscript <unfixed>
110 - freeimage <unfixed>
111 - clamav <unfixed> (fork)
112 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
113 - tuxonice-userui <unfixed>
114 - plt-scheme <unfixed>
115 - perl <unfixed>
116 - paraview <unfixed>
117 - gcvs <unfixed>
118 - dump <unfixed>
119 - aide <unfixed> (static)
120 - dar <unfixed> (static)
121 - avfs <unfixed>
122 - fpc <unfixed>
123 - winff <unfixed>
124 NOTE: inherited from fpc, see #472304
125 - lazarus <unfixed>
126 NOTE: inherited from fpc, see #472304
127 - erlang <unfixed> (embed)
128 - gamera 3.2.3-1 (embed)
129 - python2.4 <unfixed> (embed; bug #553403)
130 - python2.5 <unfixed> (embed; bug #553403)
131
132 dulwich
133 - hg-git 0.1.0-1 (embed; bug #541996)
134
135 libvigraimpex
136 - hugin <unfixed> (embed; bug #542259)
137 - enblend-enfuse <unfixed> (embed; bug #542258)
138 - gamera 3.2.3-1 (embed)
139
140 libbz2
141 - dpkg <unfixed> (static)
142
143 libgadu
144 - centericq <unfixed> (embed)
145 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
146 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
147 - kdenetwork 4:3.3.2-5 (embed)
148 NOTE: from kdenetwork: kopete
149 - ekg 1:1.8~rc0-1 (embed)
150 - kadu 0.6.0.2-3 (embed; bug #504430)
151 - gadu <itp> (embed)
152
153 xmlrpc (which package is the "origin" of this code?)
154 - drupal <unfixed> (embed)
155 - phpgroupware <unfixed> (embed)
156 - egroupware <unfixed> (embed)
157 - phpwiki <unfixed> (embed)
158 - php4 <unfixed> (embed)
159 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
160
161 shtool (affects build-time only)
162 - mysql-ocaml <unfixed> (embed)
163 - php4 <unfixed> (embed)
164
165 iceape
166 - iceweasel <unfixed> (fork)
167 - icedove <unfixed> (fork)
168 - xulrunner <unfixed> (fork)
169 - kompozer <unfixed> (embed; bug #532168)
170 - galeon <unfixed> (fork)
171 - epiphany-browser <unfixed> (fork)
172 - conkeror <unfixed> (fork)
173 - kazehakase <unfixed> (fork)
174
175 xli
176 - xloadimage <unfixed> (embed)
177
178 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
179 - openmotif <unfixed> (embed)
180 - libxpm <unfixed> (embed)
181
182 kerberized apps with BSD origin
183 - krb4 <removed> (embed)
184 - krb5 <unfixed> (embed)
185 - heimdal <unfixed> (embed)
186
187 grip (which pkg is the origin?)
188 - libcdaudio <unfixed>
189 - grip <unfixed>
190 - gnome-vfs <unfixed>
191 TODO: check vfs2 as well
192
193 fudforum
194 [etch] - phpgroupware <unfixed> (embed)
195 NOTE: phpgroupware-fudforum
196 [sarge] - egroupware-fudforum <removed> (embed)
197
198 libbsd
199 - rdate 1:1.2-3 (embed)
200 - atheme-services <unfixed>
201 - libbsd-arc4random-perl <unfixed>
202 - isakmpd <unfixed>
203 - bsdgames <unfixed> (embed)
204 - bsd-mailx <unfixed> (embed)
205 - netcat-openbsd <unfixed> (embed; bug #550611)
206 - openssh <unfixed> (embed)
207 - unworkable <unfixed> (embed)
208
209 cvs
210 - gcvs <unfixed> (embed)
211 NOTE: see cvsunix/src in tarball
212
213 pcre3
214 - php4 <unknown> (embed)
215 - analog 2:5.23-0woody1 (embed)
216 - goffice <unfixed> (embed)
217 NOTE: libgoffice-*
218 - vfu 4.06-4.1 (embed; bug #450754)
219 - tf5 5.0beta7-1 (embed)
220 - monotone 0.43-1 (embed)
221 NOTE: this only affects versions >= 0.37
222 - glib2.0 2.15.2-1 (embed)
223 - apache2 2.0.53-4 (embed)
224 - exim4 4.10-0.srh20.12 (embed)
225 - yacas <unfixed> (embed)
226 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
227 - gtamsanalyzer.app 0.42-5 (embed)
228 - tin 980117-1 (embed)
229 - kazehakase 0.5.2-1
230 - webkit 1.0.1-1 (embed)
231 - qt4-x11 <unfixed> (embed)
232 NOTE: embedded via webkit copy
233 - erlang <unfixed> (embed)
234
235 tiff
236 - wxwindows2.4 2.2.1 (embed)
237 - gamera 3.2.3-1 (embed)
238
239 uudeview
240 - libconvert-uulib-perl <unfixed> (embed)
241 - pan <unfixed> (embed)
242
243 sqlite (not affected by security vulnerabilities so far)
244 - amarok <unfixed> (embed)
245 - monotone 0.43-1 (embed)
246 - iceweasel <unfixed> (embed)
247 - heimdal <unfixed> (embed; bug #559616)
248
249 util-linux/mount
250 - loop-aes-utils <unfixed> (embed)
251 NOTE: contains code from util-linux' mount in the mount-aes-udeb
252
253 sylpheed
254 - sylpheed-claws <unfixed> (fork)
255
256 phpsysinfo
257 - egroupware <unfixed> (embed)
258 - phpgroupware <unfixed> (embed)
259
260 phpldapadmin
261 [sarge] - egroupware <unfixed> (embed)
262 NOTE: removed from egroupware after sarge
263
264 chmlib
265 - kchmviewer <unknown> (embed)
266
267 ffmpeg (libavcodec/libavformat)
268 - mplayer 1.0~rc2-14 (embed; bug #395252)
269 - kino 1.0.0-1
270 - vlc <not-affected> (Links dynamically since initial release)
271 - smilutils 0.3.0-10
272 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
273 - motion 3.1.19-1
274 - gstreamer0.10-ffmpeg 0.10.3-2
275 - xmovie <removed> (static)
276 TODO: gimp-gap (potentially using ffmpeg code as well)
277 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
278 - audacity 1.3.7-2 (embed; bug #512278)
279
280 faad2
281 - mplayer 1.0~rc2-20 (embed)
282 - avifile <unfixed> (embed; bug #538750)
283 - ffmpeg-debian <removed> (old-version)
284
285 libmad (MPEG decoding lib)
286 - xine-lib <unfixed> (embed)
287 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
288 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
289
290 libdts
291 - xine-lib <unfixed> (embed)
292
293 flac
294 - xine-lib <unfixed> (embed)
295
296 liba52
297 - a52dec <unfixed> (embed)
298 - xine-lib <unfixed> (embed)
299
300 libmpeg2
301 - mpeg2dec <unfixed> (embed)
302 - xine-lib <unfixed> (embed)
303
304 libntlm
305 - wget <unfixed> (fork; bug #550436)
306 - curl <unfixed> (fork; bug #550437)
307 - cntlm <unfixed> (fork; bug #550438)
308
309 uw-imap
310 - pine <unfixed> (embed)
311 - alpine <unfixed> (embed)
312
313 imagemagick
314 - graphicsmagick <unfixed> (fork)
315
316 python-urlgrabber
317 - mercurial <unfixed> (embed; bug #531062)
318 - w3af <unfixed> (embed; bug #555372)
319 [experimental] - harvestman <unfixed> (embed; bug #555373)
320
321 beautifulsoup
322 - python-mechanize <unfixed> (embed; bug #555349)
323 - zope2.11 <unfixed> (embed; bug #555350)
324 - twill <unknown> (embed)
325
326 halibut
327 - nsis <unfixed> (fork)
328
329 libghttp
330 - hotway <unfixed> (embed)
331
332 libsndfile
333 - ardour 1:2.7.1-1 (embed)
334
335 glibmm2.4
336 - ardour 1:2.7.1-1 (embed)
337
338 libgnomecanvasmm2.6
339 - ardour 1:2.7.1-1 (embed)
340
341 libsigc++-2.0
342 - ardour 1:2.7.1-1 (embed)
343
344 soundtouch
345 - ardour 1:2.7.1-1 (embed)
346
347 libmms
348 - xine-lib <unfixed> (embed)
349 - mimms <unfixed> (embed)
350
351 fckeditor
352 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
353 - moin 1.8.2-2 (embed; bug #452599)
354 - karrigell <removed> (embed; bug #452598)
355 - gforge 4.6.99+svn6225-1 (embed)
356 - request-tracker3.8 <unfixed> (embed)
357
358 ipatlas (not packaged in Debian)
359 - moodle <unfixed> (embed; bug #507185)
360
361 libphp-phpmailer
362 - moodle <unfixed> (embed; bug #507185)
363 - mahara <unfixed> (embed)
364 - symfony <unfixed> (embed)
365 [etch] - phpgroupware <unfixed> (embed)
366 NOTE: phpgroupware-felamimail is only in etch
367 - egroupware <unfixed> (embed; bug #504283)
368 - glpi <unfixed>
369
370 htmlArea (not packaged in Debian)
371 - moodle <unfixed> (embed)
372
373 giflib
374 - wine <unfixed> (embed; bug #466181)
375
376 bennu (not packaged in Debian, http://bennu.sourceforge.net)
377 - moodle <unfixed> (embed)
378
379 smarty
380 - moodle 1.8.2-2 (embed; bug #471158)
381 - gallery2 2.2.5-2 (embed; bug #471160)
382 - mahara 0.9.2-2 (embed; bug #471201)
383 - gosa 2.4beta1-1 (embed; bug #471200)
384
385 TinyMCE
386 - wordpress 2.5.1-3 (embed; bug #478257)
387 - moodle <unfixed> (embed; bug #507185)
388 - knowledgeroot <unfixed> (embed)
389 - joomla <itp> (bug #326398)
390
391 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
392 - scite <unfixed> (embed)
393 - qscintilla <unfixed> (embed)
394 - qscintilla2 <unfixed> (embed)
395 - geany <unfixed> (fork)
396 - anjuta <unfixed> (embed)
397
398 libphp-adodb
399 - moodle <unfixed> (embed; bug #507185)
400 NOTE: also AdoDB-XML Schema
401 - gallery2 <unfixed> (embed)
402 - phppgadmin <unfixed> (embed)
403 - egroupware <unfixed> (embed)
404 - phpwiki <unfixed> (embed)
405 - torrentflux 2.0beta1-2 (embed)
406 - ipplan <unfixed> (embed)
407 - typo3-src <unfixed> (embed)
408 - cacti <unknown> (embed)
409 [sarge] - cacti <unfixed> (embed)
410 NOTE: dependency exists, but internal version is used
411 - gforge 4.7~rc2-6 (embed)
412 - mahara <unfixed> (embed)
413
414 gzip
415 - linux-kernel <unfixed> (embed)
416 NOTE: lib/inflate.c
417 - klibc <unfixed> (embed)
418 NOTE: based on linux-kernel gzip code
419 - busybox <unfixed> (embed)
420
421 neon
422 - cadaver 0.22.3+debian-1 (embed; bug #188381)
423 - gnome-vfs2 <unfixed> (embed; bug #395874)
424 [etch] - litmus <unfixed> (embed; #395875)
425 - litmus <removed> (embed; #395875)
426 [sarge] - screem <unfixed> (embed)
427 - sitecopy 1:0.16.3-5 (embed; bug #395876)
428 [etch] - tla <unfixed> (embed; bug #395877)
429 [sarge] - tla <unfixed> (embed; bug #395877)
430
431 libmodplug
432 - gst-plugins-bad0.10 <unfixed> (embed)
433
434 libvncserver
435 - vino <unfixed> (embed)
436
437 putty
438 - filezilla <unfixed> (embed)
439
440 tinyxml (not packaged in Debian; itp bug #531968)
441 - filezilla <unfixed>
442 - crystalspace <unfixed> (embed)
443 - libwfut <unfixed> (embed)
444 - rarian <unfixed> (embed)
445 - bulletml <unfixed> (embed)
446 - pokerth <unfixed> (embed)
447 - qutecom <unfixed> (embed)
448 - sofa-framework <unfixed> (embed)
449 - yate <unfixed> (embed)
450 - antigrav <unfixed> (embed)
451 - balder2d <unfixed> (embed)
452 - cal3d <unfixed> (embed)
453 - criticalmass <unfixed> (embed)
454 - ember <unfixed> (embed)
455 - epiphany <unfixed> (embed)
456 - gambit <unfixed> (embed)
457 - noiz2sa <unfixed> (embed)
458 - ogre <unfixed> (embed)
459 - opencity <unfixed> (embed)
460 - openmovieeditor <unfixed> (embed)
461 - pouetchess <unfixed> (embed)
462 - tecnoballz <unfixed> (embed)
463 - trigger-rally <unfixed> (embed)
464 - xmoto <unfixed> (embed)
465 - mapnik <unknown> (embed)
466 NOTE: uses a different XML parser by default
467 - rrootage 0.23a-6 <embed>
468 NOTE: links to libbulltetml
469 - boson <unknown> (embed)
470 NOTE: the embedded code is unused
471
472 gv
473 - evince <unfixed> (embed)
474 NOTE: ps/ tree from gv 3.5.8
475 NOTE: evince-gtk is affected (a component of evince source package)
476
477 libXbae
478 - paw <removed> (embed)
479 [etch] - paw <unfixed> (embed)
480
481 libgtkhtml
482 - claws-mail-extra-plugins <unfixed> (fork)
483
484 libXaw
485 - paw <removed> (embed)
486 [etch] - paw <unfixed> (embed)
487 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
488
489 libgd2
490 - graphviz <unfixed> (embed)
491 NOTE: lib/gd seems to be 2.0.33
492 - wml <unfixed> (embed)
493 - libwmf <unfixed> (embed)
494 NOTE: derived from gd 1.6.3
495
496 rar
497 - unrar-nonfree <unfixed> (embed)
498
499 unrar-free (maybe this code is derived from the original rar, too?)
500 - clamav <unfixed> (embed)
501 NOTE: seems to be disabled in default config
502
503 mplayer (DirectMedia Object loader)
504 - xine-lib <unfixed> (embed)
505 NOTE: src/libw32dll/
506 - vlc <unfixed> (embed)
507 NOTE: modules/codec/dmo/
508 - mplayer 1.0~rc2-20 (embed)
509
510 libwpd (WordPerfect converter)
511 - openoffice.org <unfixed> (embed)
512
513 fsplib (http://sourceforge.net/projects/fsp/)
514 - gftp <unfixed> (embed)
515 NOTE: lib/fsplib version 0.3
516
517 sprng
518 - tree-puzzle <unfixed> (embed)
519
520 librpcsecgss
521 - krb5 <unfixed> (embed)
522
523 jasper
524 - ghostscript 8.70~dfsg-2+b1 (embed)
525 - ghostscript <unfixed> (static)
526
527 libiris
528 - psi <unfixed> (embed)
529 - kdenetwork <unfixed> (embed)
530 NOTE: kopete embeds libiris but links dynamically to libidn
531 - kdegames <unfixed> (embed)
532 NOTE: ksirk/kde4
533
534 libidn
535 - monotone 0.43-1 (embed)
536 - psi <unfixed> (embed)
537 NOTE: psi embeds libiris which embeds libidn
538 - kdegames <unfixed> (embed)
539 NOTE: kdegames/kde4 embeds libiris which embeds libidn
540
541 liblua
542 - monotone 0.43-1 (embed)
543 - nmap 5.00-1 (embed; bug #527997)
544 [lenny] - nmap <unfixed> (embed; bug #527997)
545 - ocropus <unfixed> (embed)
546
547 libbotan
548 - monotone 0.43-1 (embed)
549
550 NetXX
551 - monotone 0.43-1 (embed)
552
553 libgc
554 - mono <unfixed> (embed)
555
556 lzma
557 - p7zip <unfixed> (embed)
558 - xz-utils <unfixed> (fork)
559
560 lzo
561 - grub2 <unfixed> (embed)
562
563 yassl
564 - mysql-dfsg-5.0 <unfixed> (embed)
565
566 pax code
567 - tar <unfixed> (embed)
568 - cpio <unfixed> (embed)
569
570 t1lib
571 - tetex-bin 2.0.2-1 (embed)
572 - texlive-bin <unknown> (embed)
573
574 guichan
575 - boswars <unfixed> (embed)
576 NOTE: maintainer notified us, working on it
577
578 tolua
579 - boswars <unfixed> (embed)
580 NOTE: maintainer notified us, working on it
581 - ocropus <unfixed> (embed)
582 - freeciv <unfixed> (embed)
583
584 asio-dev
585 - luxrender <removed> (embed)
586
587 xine-lib
588 - vlc <unfixed> (embed)
589 NOTE: only parts included in modules/access/rtsp
590
591 netpbm
592 - tcl8.3 <unfixed> (embed)
593 - tcl8.4 <unfixed> (embed)
594 - tcl8.5 <unfixed> (embed)
595 NOTE: generic/tkImgGIF.c
596
597 tk8.5
598 - tk8.0 <removed> (old-version)
599 - tk8.3 <unfixed> (old-version)
600 - tk8.4 <unfixed> (old-version)
601 - perl-tk <unfixable> (fork)
602
603 samba
604 - mc 2:4.6.2~git20080311-1 (embed)
605 NOTE: maintainer is aware of this, currently searching a solution
606
607 plib1.8.4c2
608 - boson <unfixed> (fork)
609 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
610
611 fribidi
612 - quesoglc <unfixed> (embed)
613 NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
614
615 glew
616 - quesoglc <unfixed> (embed; bug #489341)
617 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
618 - trigger <unfixed> (embed)
619 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
620 - trigger-rally <unfixed> (embed)
621 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
622
623 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
624 - transcend <unfixed> (embed)
625 - cultivation <unfixed> (embed)
626 - passage <unfixed> (embed)
627 - gravitation <unfixed> (embed)
628
629 tar
630 - libarchive <unfixed> (embed)
631 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
632
633 cpio
634 - libarchive <unfixed> (embed)
635 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
636
637 webkit
638 - qt4-x11 <unfixed> (embed; bug #479851)
639 - kdelibs <unfixed> (old-version)
640 - kde4libs <unfixed> (fork)
641
642 ftgl
643 - blender 2.46+dfsg-1 (embed)
644
645 wv
646 - abiword <unfixed>
647
648 qemu
649 - kvm <unfixed> (embed; bug #543159)
650 - xen-3 <unfixed> (embed)
651 - xen-unstable <unfixed> (embed)
652
653 vgabios
654 - kvm <unfixed> (embed; bug #489442)
655
656 bochs
657 - kvm <unfixed> (embed; bug #489442)
658
659 speex
660 - vorbis-tools <unfixed> (embed)
661 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
662 - gst-plugins-good0.10 <unfixed> (embed)
663 - xine-lib <unfixed> (embed)
664 - libfishsound <unfixed> (embed)
665 - libannodex <unfixed> (embed)
666 - vlc <unfixed> (embed)
667 - xmms-speex <unfixed> (embed)
668 - libsdl-sound1.2 <unfixed> (embed)
669 - sweep <unfixed> (embed)
670
671 libreadline
672 - magic <itp> (old-version)
673
674 opcode
675 - ode <unfixed> (embed)
676 NOTE: opcode is not a package in debian, it is just embedded
677 NOTE: http://www.codercorner.com/Opcode.htm
678
679 gimpact
680 - ode <unfixed> (embed)
681 NOTE: gimpact is not a package in debian, it is just embedded
682 NOTE: http://gimpact.sf.net
683
684 mochikit
685 - mahara <unfixed> (embed)
686 NOTE: they require extra patches, still unmerged upstream
687 - ntop <unfixed> (embed)
688 - coherence 0.6.2-1 (embed)
689 - paste <unfixed> (embed)
690 - turbogears <unfixed> (embed)
691 - plone3 <unfixed> (embed)
692 - xulrunner <unfixed> (embed)
693 - libjifty-plugin-chart-perl <unfixed> (embed)
694 - sabnzbdplus <unfixed> (embed)
695 - tgmochikit <unfixed> (embed)
696
697 prototypejs
698 - netbeans-ide 6.0.1+dfsg-2 (embed)
699 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
700 - webcit <unfixed> (embed; bug #555219)
701 - asterisk 1:1.6.2.0~rc3-1 (embed)
702 - libjson-ruby 1.1.4-1 (embed; bug #555224)
703 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
704 - horde3 <unfixed> (embed)
705 - knowledgeroot <unfixed> (embed; bug #555230)
706 - mediatomb <unfixed> (embed; bug #555233)
707 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
708 - ebug-http <unfixed> (embed; bug #555236)
709 - phpgedview <removed> (embed)
710 - poker-network <unfixed> (embed; bug #555238)
711 - rails 2.1.0-6 (embed)
712 - wordpress 2.5.0-2 (embed; bug #555243)
713 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
714 TODO: search through all of the other zope packages
715 - ampache 3.4.1-2 (embed)
716 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
717 - hobix 0.5~svn20070319-4 (embed; bug #555247)
718 - zabbix 1.6.6-4 (embed; bug #555250)
719 - chora2 <unfixed> (embed; bug #555253)
720 - gollem <unfixed> (embed; bug # 555254)
721 - jscropperui 1.2.1-1 (embed; bug #555257)
722 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
723 - ingo1 <unfixed> (embed; bug #555261)
724 - kronolith2 <unfixed> (embed; bug #555262)
725 - activeldap <unfixed> (embed)
726 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
727 - mantis <unfixed> (embed; bug #555265)
728 - otrs2 2.3.4-6 (embed; bug #555267)
729 - webcalendar <unfixed> (embed; bug #555269)
730 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
731 - jifty 0.90519-1 (embed; bug #555271)
732 - jquery <unfixed> (embed; bug #555272)
733 - passenger 2.2.5debian1-1 (embed; bug #555273)
734 - plone3 <unfixed> (embed; bug #555275)
735 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
736 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
737 - xulrunner <unfixed> (embed)
738 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
739
740 gdb
741 - insight <unfixed> (embed)
742
743 e2fsprogs
744 - ldiskfsprogs <unfixable> (fork)
745
746 quazip (not packaged in Debian)
747 - qcake <unfixed> (embed)
748 NOTE: starting with upstream version 0.6.4
749
750 exo
751 - pcmanfm <unfixed> (embed; bug #499677)
752 NOTE: slightly modified source code
753
754 java
755 - openjdk-6 <unfixed>
756 - sun-java5 <unfixed>
757 - sun-java6 <unfixed>
758
759 libphp-snoopy
760 - ampache 3.4.1-2 (embed; bug #504169)
761 - gforge 4.6.99+svn6094-2 (embed)
762 - mahara 1.0.5-2 (embed; bug #504170)
763 - pixelpost 1.7.1-5 (embed; bug #504171)
764 - mediamate 0.9.3.6-5 (embed; bug #504172)
765 - opendb <removed> (embed; bug #504173)
766 [etch] - opendb <unfixed> (embed; bug #504173)
767 - wordpress 2.5.1-9 (embed; bug #443948)
768 - moodle <unfixed> (embed; bug #507185)
769 [etch] - phpgroupware <unfixed> (embed)
770 NOTE: phpgroupware-felamimail
771 - magpierss 0.72-3 (embed; bug #431089)
772
773 jquery
774 - zekr <unfixed> (embed)
775 - wordpress <unknown> (embed)
776 - yocto-reader <unfixed> (embed)
777 - textpattern <unfixed> (embed)
778 - genshi 0.5.1-1 (embed)
779 NOTE: compressed file under examples/ dir
780 - prewikka <unfixed> (embed)
781 - libramaze-ruby <unfixed> (embed)
782 - drupal5 <unfixed> (embed)
783 - b2evolution <unfixed> (embed)
784 - wesnoth <unfixed> (embed)
785
786 tablesorter (jquery plugin, not packaged yet)
787 - wesnoth <unfixed> (embed)
788
789 kses
790 - wordpress <unfixed> (embed; bug #504242)
791 NOTE: their copy has all methods renamed to wp_<foo>
792 NOTE: kses isn't in Debian, RFP: #504240
793 - moodle <unfixed> (embed; bug #507185)
794 - egroupware <unfixed> (embed)
795
796 magpierss
797 - wordpress <unfixed> (embed; bug #504242)
798 - moodle <unfixed>
799
800 php-gettext
801 - wordpress 2.8.4-1 (embed; bug #504242)
802
803 libphp-ixr (name may change, it is the Incutio XML-RPC)
804 - wordpress <unfixed> (embed; bug #504242)
805 NOTE: libphp-ixr isn't in Debian, RFP: #504236
806 - dokuwiki <unfixed> (embed)
807 - textpattern <unfixed> (embed)
808
809 libphp-cas
810 - glpi <unfixed> (embed)
811 - moodle <unfixed> (embed; bug #505984)
812
813 scriptaculous (prototype.js is among the embeds in the following)
814 - glpi <unfixed> (embed)
815 - libaws <unfixed> (embed; bug #555222)
816 - op-panel <unfixed> (embed)
817 - symfony <unfixed> (embed)
818 NOTE: maintainer says there are extra incompatible changes required
819 - pixelpost 1.7.1-6 (embed)
820 - webhelpers <unfixed> (embed)
821 - qwik <unfixed> (embed; bug #555241)
822 - smokeping <unfixed> (embed)
823 - turba2 <unfixed> (embed)
824 - typo3-src 4.2.3-1 (embed)
825 - request-tracker3.6 <unfixed> (embed)
826 - request-tracker3.8 <unfixed> (embed)
827 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
828 - wordpress 2.5.0-2 (embed)
829 - libhtml-prototype-perl 1.48-3 (embed)
830
831 libmarkdown-php
832 - moodle <unfixed> (embed; bug #507185)
833 - pixelpost 1.7.1-6 (embed)
834
835 php-openid
836 - wordpress-openid <itp> (embed)
837
838 geshi
839 - dokuwiki 0.0.20080505-3.1 (embed)
840 - pgfouine 1.0-1.1 (embed)
841 - websvn 2.1.0-1 (embed)
842
843 webcalendar
844 - gforge 4.7~rc2-6 (embed; bug #504758)
845
846 libical
847 - kdepim <unfixed> (fork)
848 - kdepimlibs <unfixed> (fork)
849 NOTE: fixed in KDE4 post 4.1.x series
850 - claws-mail-extra-plugins <unfixed> (fork)
851
852 libltdl3
853 - kdelibs <unfixed> (embed)
854 NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
855 - synfig <unfixed> (embed)
856
857 harfbuzz
858 - qt4-x11 <unfixed> (embed)
859
860 libzip
861 - php5 <unfixed> (fork)
862 - odt2txt <unfixed> (embed; bug #523808)
863
864 json.php (not packaged; should be replaced with php's built-in functions)
865 - moodle <unfixed>
866 - yui <unfixed>
867 - gallery2 <unfixed>
868 - dokuwiki <unfixed>
869 - typo3-src <unfixed>
870
871 php-fpdf
872 - tcpdf <itp> (fork)
873 - moodle <unfixed>
874 - phpwiki <unfixed>
875 - egroupware <unfixed>
876 - ldap-account-manager <unfixed> (fork)
877
878 tcpdf (itp: #495985)
879 - moodle <unfixed>
880 - phpmyadmin <unfixed>
881
882 typo3
883 - moodle <unfixed>
884
885 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
886 - moodle <unfixed>
887 - gosa <unfixed>
888
889 php-ole (itp: #487558)
890 - moodle <unfixed>
891
892 pieforms (http://www.catalyst.net.nz)
893 - mahara <unfixed>
894
895 savant2 (http://phpsavant.com)
896 - egroupware <unfixed>
897
898 rssparser (http://nwow.org)
899 - egroupware <unfixed>
900 - phpgroupware <unfixed>
901
902 lcms
903 - openjdk-6 <unfixed> (fork)
904
905 libphp-phplayersmenu
906 - diogenes <unfixed>
907 - phpldapadmin <unfixed>
908
909 libphp-pclzip
910 - docvert <unfixed>
911 - moodle <unfixed>
912 - egroupware <unfixed>
913
914 libphp-simplepie
915 - dokuwiki <unfixed>
916
917 libphp-jpgraph
918 - egroupware <unfixed>
919
920 php-simpletest
921 - moodle <unfixed>
922
923 libpng
924 - iceweasel <not-affected> (uses xulrunner)
925 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
926 - iceape 1.0.13~pre080614i-0etch1 (embed)
927 - xulrunner 1.9.0.13-1 (embed)
928 [lenny] - xulrunner 1.9.0.11-0lenny1
929 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
930 - gamera 3.2.3-1 (embed)
931
932 irssi
933 - silc-client <unfixed> (embed)
934 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
935
936 extc
937 - mtasc <unfixed> (embed)
938 - haxe <unfixed> (embed)
939
940 swflib
941 - mtasc <unfixed> (embed)
942 - haxe <unfixed> (embed)
943
944 libitext-java
945 - bouncycastle 2.1.4-1 (embed)
946
947 python-ply
948 - pyke <unfixed> (embed; bug #555363)
949 - pywbem <unfixed> (embed; bug #555364)
950 - sepolgen <unfixed> (embed; bug #555365)
951 - zope-textindexng3 <unknown> (embed)
952 - iceweasel <not-affected> (uses xulrunner)
953 - xulrunner <unknown> (embed)
954 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
955
956 libdumbnet (libdnet upstream)
957 - nmap <unfixed> (fork)
958
959 gcc-4.4
960 - gcc-mingw32 <unfixed> (embed)
961
962 camlimages
963 - advi <unfixed> (static; bug #550441)
964
965 memcached
966 - memcachedb <unfixed> (embed)
967
968 yajl
969 - argyll <unfixed> (embed; bug #544223)
970 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
971
972 nusoap
973 - gforge 4.8.2-1 (embed)
974
975 libept
976 - adept <unfixed> (embed; bug #540649)
977
978 libvorbis
979 - iceweasel <not-affected> (uses xulrunner)
980 - xulrunner <unfixed> (embed; bug #540959)
981 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
982 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
983 - iceape <unfixed> (embed)
984 [etch] - iceape <not-affected> (introduced in 2.0)
985 [lenny] - iceape <not-affected> (introduced in 2.0)
986
987 cairo
988 - iceweasel <not-affected> (uses xulrunner)
989 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
990
991 liboggz
992 - iceweasel <not-affected> (uses xulrunner)
993 - xulrunner <unfixed> (embed; bug #540959)
994 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
995 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
996 - iceape <unfixed> (embed)
997 [etch] - iceape <not-affected> (introduced in 2.0)
998 [lenny] - iceape <not-affected> (introduced in 2.0)
999
1000 liboggplay
1001 - iceweasel <not-affected> (uses xulrunner)
1002 - xulrunner <unfixed> (embed; bug #540959)
1003 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1004 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1005 - iceape <unfixed> (embed)
1006 [etch] - iceape <not-affected> (introduced in 2.0)
1007 [lenny] - iceape <not-affected> (introduced in 2.0)
1008
1009 php-net-dnsbl
1010 - serendipity <unfixed> (embed)
1011
1012 php-onyx-rss
1013 - serendipity <unfixed> (embed)
1014
1015 php-text-wiki
1016 - serendipity <unfixed> (embed)
1017
1018 php-xml-rpc
1019 - serendipity <unfixed> (embed)
1020
1021 polarssl (does not have a shared library)
1022 - pdkim <itp> (embed; bug #543150)
1023 - xyssl <unfixed> (old-version)
1024
1025 pidgin
1026 - gaim <removed> (old-version)
1027
1028 icu
1029 - webkit 1.0.1-1 (embed; bug #547214)
1030 - texlive-bin <unfixed> (fork)
1031 NOTE: texlive upstream working with icu upstream to merge their changes
1032
1033 cyrus-imapd-2.2
1034 - kolab-cyrus-imapd <unfixed> (fork)
1035 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1036
1037 python-cxx-dev
1038 - freecad <unfixed> (embed; bug #547936)
1039
1040 libzipios++-dev
1041 - freecad <unfixed> (embed; bug #547941)
1042
1043 linux-2.6
1044 - kvm <unfixed> (embed; bug #549973) [./kernel/*]
1045 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1046 - kernel-source-2.6.8 <removed> (old-version)
1047 - kernel-source-2.4.27 <removed> (old-version)
1048 - kernel-source-2.4.24 <removed> (old-version)
1049 - kernel-source-2.2.25 <removed> (old-version)
1050 - kernel-source-2.2.20 <removed> (old-version)
1051
1052 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1053 - kvm <unfixed> (embed) [./libfdt/*]
1054
1055 qweb (not packaged)
1056 - ajaxterm <unfixed>
1057
1058 opensaml2
1059 - opensaml <removed> (old-version)
1060
1061 shibboleth-sp2
1062 - shibboleth-sp <removed> (old-version)
1063
1064 tuxonice-userui
1065 - suspend2-userui <removed> (old-version)
1066
1067 expat
1068 - w3c-libwww <removed> (embed; bug #551941)
1069 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1070 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1071 - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1072 - python2.4 <unfixed> (embed; bug #553403)
1073 - wxwindows2.4 <removed> (embed)
1074 - wxwidgets2.6 <unfixed> (embed)
1075 - wxwidgets2.8 <unfixed> (embed)
1076 - celementtree <unfixed> (embed)
1077 - audacity 1.3.2-1 (embed)
1078 - matanza <unfixed> (embed)
1079 - tdom <unfixed> (embed)
1080 - udunits <unfixed> (embed)
1081 - apr-util 1.2 (embed)
1082 - ayttm <unfixed> (embed)
1083 - cableswig <unfixed> (embed)
1084 - cadaver <unfixed> (embed)
1085 - cmake <unfixed> (embed)
1086 - coin3 <unfixed> (embed)
1087 - gdcm <unfixed> (embed)
1088 - ghostscript <unfixed> (embed)
1089 - grmonitor <unfixed> (embed)
1090 - iceape <unfixed> (embed)
1091 - insighttoolkit <unfixed> (embed)
1092 - libparagui1.1 <unfixed> (embed)
1093 - paraview <unfixed> (embed)
1094 - poco <unfixed> (embed)
1095 - simgear <unfixed> (embed)
1096 - sitecopy <unfixed> (embed)
1097 - smart 1.0-1 (embed)
1098 [etch] - smart <unfixed> (embed)
1099 - swish-e <unfixed> (embed)
1100 - tla <unfixed> (embed)
1101 - vtk <unfixed> (embed)
1102 - wbxml2 <unfixed> (embed)
1103 - xmlrpc-c <unfixed> (embed)
1104 - iceweasel <unfixed> (embed)
1105 - kompozer <unfixed> (embed)
1106 - vxl <unfixed> (embed)
1107 - xulrunner <unfixed> (embed)
1108 - apache2 2.2 (embed)
1109 - texlive-bin <unfixed> (embed) [included twice]
1110 - vnc4 <unfixed> (embed)
1111 - xotcl <unfixed> (embed)
1112
1113 xerces-c
1114 - xerces-c2 <unfixed> (old-version)
1115 - xerces27 <removed> (old-version)
1116
1117 md5 (RSA's version; not the gnu version provided by coreutils)
1118 - w3c-libwww <removed> (embed; bug #551942)
1119 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1120
1121 enet
1122 - sauerbraten <unfixed> (embed; #497194)
1123
1124 eglibc
1125 - glibc <removed> (old-version)
1126
1127 galib
1128 - gamera 3.2.3-1 (embed)
1129
1130 configobj
1131 - bzr <unfixed> (embed; bug #555336)
1132 - elisa <unfixed> (embed; bug #555337)
1133 - gaupol <unfixed> (embed; bug #555338)
1134 - ipython <unfixed> (embed; bug #555339)
1135 - pida <unfixed> (embed; bug #555340)
1136 - psychopy <unfixed> (embed; bug #555341)
1137 - rest2web <unfixed> (embed; bug #555342)
1138 - auth2db <unknown> (embed)
1139 - dynagen <unknown> (embed)
1140 - iceweasel <unknown> (embed)
1141 - sabnzbdplus <unknown> (embed)
1142 - xulrunner <unknown> (embed)
1143 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1144
1145 python-clientform
1146 - bibus <unfixed> (embed; bug #555332)
1147 - zope2.10 <unfixed> (embed; bug #555333)
1148 - zope2.11 <unfixed> (embed; bug #555334)
1149 - python-mechanize <unknown> (embed)
1150 - twill <unknown> (embed)
1151
1152 python-mechanize
1153 - zope2.10 <unfixed> (embed; bug #555337)
1154 - zope2.11 <unfixed> (embed; bug #555338)
1155 - twill <unknown> (embed; bug #555339)
1156
1157 pexpect
1158 - duplicity 0.6.06-1 (embed; bug #555361)
1159 - hplip <unfixed> (embed; bug #555362)
1160 - smart <unfixed> (embed; bug #555363)
1161
1162 pyparsing
1163 - bauble <unfixed> (embed; bug #555366)
1164 - boa-constructor 0.6.1-8 (embed; bug #555367)
1165 - calibre <unfixed> (embed; bug #555368)
1166 - matplotlib <unfixed> (embed; bug #531024)
1167 - zhpy <unfixed> (embed; bug #555370)
1168 - polybori <unknown> (embed)
1169 - python-whoosh <unknown> (embed)
1170 - twill <unknown> (embed)
1171 - zope-textindexng3 <unknown> (embed)
1172
1173 python-pysqlite2
1174 - python2.4 <unfixed> (embed; bug #553403)
1175 - python2.5 <unfixed> (embed; bug #553403)
1176
1177 celementtree
1178 - python2.5 <unfixed> (embed)
1179 - smart 1.0-1 (embed)
1180 [etch] - smart <unfixed> (embed)
1181
1182 elementtree
1183 - python2.5 <unfixed> (embed)
1184 - bzr <unfixed> (embed; bug #555343)
1185 - gedit 2.28.2-1 (embed; bug #555344)
1186 - smart 1.0-1 (embed)
1187 [etch] - smart <unfixed> (embed)
1188 - solfege <unfixed> (embed; bug #555345)
1189 - w3af <unfixed> (embed; bug #555346)
1190 - python-qt4 <unknown> (embed)
1191 - sphinx <unknown> (embed)
1192 - python-nltk <itp> (embed)
1193
1194 python2.5
1195 - python2.4 <unfixed> (old-version)
1196 - jython <unfixed> (embed)
1197 NOTE: embeds many stdlib modules
1198 - python-django <unfixed> (embed; bug #555419)
1199 NOTE: embeds stdlib modules: doctest, decimal
1200 - gamera 3.2.3-1 (embed)
1201 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1202 - boa-constructor <unfixed> (embed; bug #555426)
1203 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1204 - nicotine <unfixed> (embed; bug #555427)
1205 NOTE: embeds stdlib modules: ConfigParser
1206 - museek+ <unfixed> (embed; bug #555428)
1207 NOTE: embeds stdlib modules: ConfigParser
1208 - vegastrike-data <unfixed> (embed)
1209 NOTE: embeds many stdlib modules
1210 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1211 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1212 - config-manager <unfixed> (embed; bug #555423)
1213 NOTE: embeds stdlib modules: optparse
1214 - jhbuild 2.28.0-1 (embed; bug #555421)
1215 NOTE: embeds stdlib modules: optparse, subprocess
1216 - smart <unfixed> (embed; bug #555432)
1217 NOTE: embeds stdlib modules: optparse
1218 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1219 NOTE: embeds stdlib modules: doctest
1220 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1221 NOTE: embeds stdlib modules: doctest
1222 - distribute <unfixed> (embed)
1223 NOTE: embeds stdlib modules: doctest
1224 - python-setuptools <unfixed> (embed; bug #555435)
1225 NOTE: embeds stdlib modules: doctest
1226 - zope.testing <unfixed> (embed; bug #555436)
1227 NOTE: embeds stdlib modules: doctest
1228 - translate-toolkit <unfixed> (embed; bug #555422)
1229 NOTE: embeds stdlib modules: textwrap, contextlib
1230 - libtpclient-py <unfixed> (embed; bug #555424)
1231 NOTE: embeds stdlib modules: subprocess
1232 - grass <unfixed> (embed; bug #555425)
1233 NOTE: embeds stdlib modules: subprocess
1234 - coherence <unfixed> (embed; bug #555429)
1235 NOTE: embeds stdlib modules: uuid
1236 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1237 NOTE: embeds stdlib modules: uuid
1238 - setroubleshoot <unfixed> (embed; bug #555431)
1239 NOTE: embeds stdlib modules: uuid
1240 - linkchecker <unfixed> (embed; bug #555414)
1241 NOTE: embeds msgfmt.py script
1242 - imdbpy <unfixed> (embed)
1243 NOTE: embeds msgfmt.py script
1244 - kiwi <unfixed> (embed)
1245 NOTE: embeds msgfmt.py script
1246 - moin <unfixed> (embed)
1247 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1248 - plone3 <unfixed> (embed)
1249 NOTE: embeds msgfmt.py script
1250 - roundup <unfixed> (embed)
1251 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1252 - rednotebook <unfixed> (embed; bug #555415)
1253 NOTE: embeds msgfmt.py script
1254 - turbogears <unfixed> (embed)
1255 NOTE: embeds msgfmt.py script
1256 - elisa <unfixed> (embed)
1257 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1258 - calibre <unfixed> (embed)
1259 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1260 - mailman <unfixed> (embed; #555416)
1261 NOTE: embeds msgfmt.py script
1262 - python-docutils <unknown> (embed)
1263 NOTE: embeds stdlib modules: optparse, textwrap
1264 - python-imaging <unknown> (embed)
1265 NOTE: embeds stdlib modules: doctest
1266 - python-mechanize <unknown> (embed)
1267 NOTE: embeds stdlib modules: doctest
1268 - twill <unknown> (embed)
1269 NOTE: embeds stdlib modules: subprocess
1270 - zeroc-ice <unknown> (embed)
1271 NOTE: embeds stdlib modules: subprocess
1272 - wxwidgets2.8 <unknown> (embed)
1273 NOTE: embeds stdlib modules: subprocess
1274 - cycle <unknown> (embed)
1275 NOTE: embeds msgfmt.py script
1276 - deluge <unknown> (embed)
1277 NOTE: embeds msgfmt.py script
1278 - opendict <unknown> (embed)
1279 NOTE: embeds msgfmt.py script
1280 - openerp-client <unknown> (embed)
1281 NOTE: embeds msgfmt.py script
1282 - rapidsvn <unknown> (embed)
1283 NOTE: embeds msgfmt.py script
1284 - wammu <unknown> (embed)
1285 NOTE: embeds msgfmt.py script
1286 - gaphor <unknown> (embed)
1287 NOTE: embeds msgfmt.py script
1288 - pida <unknown> (embed)
1289 NOTE: embeds msgfmt.py script
1290 - python-formencode <unknown> (embed)
1291 NOTE: embeds msgfmt.py script
1292 - duplicity <unfixed> (embed)
1293 NOTE: embeds stdlib module: urlparse, tarfile
1294 - pygopherd <unfixed> (embed)
1295 NOTE: embeds stdlib module: zipfile
1296
1297 argparse
1298 - twill <unfixed> (embed; bug #555347)
1299 - ipython <unfixed> (embed; bug #555348)
1300
1301 coherence
1302 - elisa <unfixed> (embed; bug #555335)
1303
1304 simpletal
1305 - plastex <unfixed> (embed; bug #555371)
1306
1307 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1308 - postr <unfixed> (embed)
1309 - elisa <unfixed> (embed)
1310
1311 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1312 - apertium-tolk <unfixed> (embed)
1313 - ipython <unfixed> (embed)
1314 - virtaal <unfixed> (embed)
1315
1316 distribute
1317 - setuptools <removed> (old-version)
1318
1319 rails
1320 - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1321 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1322 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1323 - thin <unfixed> (embed) [./spec/rails_app/*]
1324 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1325 NOTE: be dangerous if developers are naively basing their code off of the examples
1326 NOTE: prototype.js is among the example files
1327
1328 lucene2 (prototype.js is among the embeds in the following)
1329 - lucene <unfixed> (old-version)
1330 - pylucene <unfixed> (embed)
1331 - libpdfbox-java <unfixed> (embed)
1332 - libfontbox-java <unfixed> (embed)
1333 - libjempbox-java <unfixed> (embed)
1334 - solr <unfixed> (embed)
1335
1336 unicode-data
1337 - syslinux <unfixed> (embed)
1338 - camomile <unfixed> (embed)
1339 - fribidi <unfixed> (embed)
1340 - m17n-db <unfixed> (embed)
1341 - sbcl <unfixed> (embed)
1342 - heimdal <unfixed> (embed)
1343 - icu <unfixed> (embed)
1344 - icu4j <unfixed> (embed)
1345 - krb5 <unfixed> (embed)
1346 - moodle <unfixed> (embed)
1347 - openldap <unfixed> (embed)
1348 - pike7.6 <unfixed> (embed)
1349 - samba <unfixed> (embed)
1350 - samba4 <unfixed> (embed)
1351 - cmucl <unfixed> (embed)
1352 - typo3-src <unfixed> (embed)
1353 - mauve <unfixed> (embed)
1354 - texlive-bin <unfixed> (embed)
1355 - ypsilon <unfixed> (embed)
1356 - jeuclid <unfixed> (embed)
1357 - charmap.app <unfixed> (embed)
1358 - clisp <unfixed> (embed)
1359 - gnulib <unfixed> (embed)
1360 - opensrs-client <unfixed> (embed)
1361 - saxonb <unfixed> (embed)
1362 - rails <unfixed> (embed)
1363
1364 feedparser
1365 - rawdog <unfixed> (embed; bug #383422)
1366 - miro <unfixed> (embed; bug #555351)
1367 - calibre <unfixed> (embed; bug #555352)
1368 - freevo <unfixed> (embed; bug #555353)
1369 - pida <unfixed> (embed; bug #555354)
1370 - planet-venus <unfixed> (embed; bug #555355)
1371 - plone3 <unfixed> (embed; bug #555356)
1372 - exaile 0.2.14+debian-1 (embed)
1373 - screenlets 0.1.2-3 (embed)
1374 NOTE: included twice
1375
1376 agg:
1377 - matplotlib <unfixed> (embed: bug #377271)
1378 - contextfree <unfixed> (embed)
1379 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1380 - exactimage <unfixed> (embed)
1381 - python-enable <unfixed> (embed)
1382 - mapnik 0.5.1-3 (embed)
1383 NOTE: links statically to agg, but shared library is not available (bug #377271)
1384
1385 vtk
1386 - paraview <unfixable> (embed; bug #495426)
1387
1388 txt2tags
1389 - rednotebook <unfixed> (embed)
1390
1391 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1392 - gajim <unfixed> (embed)
1393 - emesene <unfixed> (embed)
1394 - convirt <unfixed> (embed)
1395 - pida <unfixed> (embed)
1396 - rednotebook <unfixed> (embed)
1397
1398 horde3 (prototype.js is among the embeds in the following)
1399 - mnemo2 <unfixed> (embed)
1400 - nag2 <unfixed> (embed)
1401
1402 cimg
1403 - gmic <itp> (embed)
1404
1405 mootools
1406 - gmic <itp> (embed)
1407
1408 openldap
1409 - openldap2.3 <removed> (old-version)
1410
1411 grub2
1412 - grub <unfixed> (old-version)
1413
1414 gnupginterface
1415 - duplicity <unfixed> (embed)
1416
1417 python-dateutil
1418 - awn-extras-applets <unfixed> (embed)
1419 - matplotlib <unknown> (embed)
1420
1421 cups
1422 - cupsys <removed> (old-version)
1423
1424 yui
1425 - bcfg2 <not-affected> (present in source but not included in any binary files)
1426 - serendipity <unfixed> (embed; bug #557746)
1427 - moodle 1.8.2.dfsg-5 (embed)
1428 - jifty <unfixed> (embed; bug #557748)
1429 - webgui 7.7.26-1 (embed)
1430 - loggerhead 1.17-1 (embed)
1431
1432 quake3 (vanilla source not packaged in debian)
1433 - openarena <unfixable> (fork)
1434
1435 quake2 (vanilla source not packaged in debian)
1436 - alien-arena <unfixable> (fork)
1437 - warsow <unfixable> (fork)
1438
1439 libtheora
1440 - iceweasel <not-affected> (uses xulrunner)
1441 - xulrunner <unfixed> (embed; bug #540959)
1442 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1443 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1444 - iceape <unfixed> (embed; bug #559276)
1445 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1446 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1447
1448 dtoa
1449 - bfilter <unfixed> (embed)
1450 - cacao <unfixed> (embed)
1451 - cdrdao <unfixed> (embed)
1452 - classpath <unfixed> (embed)
1453 - freej <unfixed> (embed)
1454 - iceape <unfixed> (embed)
1455 - iceweasel <unfixed> (embed)
1456 - jscoverage <unfixed> (embed)
1457 - kde4libs <unfixed> (embed)
1458 - kdelibs <unfixed> (embed)
1459 - kompozer <unfixed> (embed)
1460 - libv8 <unfixed> (embed)
1461 - mono <unfixed> (embed)
1462 - newlib <unfixed> (embed)
1463 - nspr <unfixed> (embed)
1464 - php5 <unfixed> (embed)
1465 - polyml <unfixed> (embed)
1466 - qt4-x11 <unfixed> (embed)
1467 - rhino <unfixed> (embed)
1468 NOTE: code translated to Java
1469 - ruby1.8 <unfixed> (embed)
1470 - ruby1.9 <unfixed> (embed)
1471 - ruby1.9.1 <unfixed> (embed)
1472 - sdd <unfixed> (embed)
1473 - sfind <unfixed> (embed)
1474 - star <unfixed> (embed)
1475 - tinymux <unfixed> (embed)
1476 - virtualbox-ose <unfixed> (embed)
1477 - webkit <unfixed> (embed)
1478 - xulrunner <unfixed> (embed)
1479
1480 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1481 - firegpg <unfixed> (embed)
1482 - enigmail <unfixed> (embed)
1483
1484 ptmalloc (not packaged in Debian)
1485 - crystalspace <unfixed> (embed)
1486 - qt4-x11 <unfixed> (embed)
1487
1488 svgalib
1489 - usplash <unfixed> (embed)
1490
1491 bogl
1492 - usplash <unfixed> (embed)
1493
1494 taglist
1495 - usplash <unfixed> (embed)
1496
1497 portaudio
1498 - audacity <unfixed> (embed; bug #323711)
1499
1500 nyquist
1501 - audacity <unfixed> (embed)
1502 NOTE: embeds a forked nyquist with support for a shared library
1503
1504 vamp-plugin-sdk
1505 - audacity <unfixed> (embed)
1506
1507 wordpress
1508 - libwordpress-xmlrpc-perl <unfixed> (embed) [./xmlrpc.php]

  ViewVC Help
Powered by ViewVC 1.1.5