/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 12694 by kees, Thu Aug 27 16:11:46 2009 UTC revision 13722 by jwilk-guest, Tue Jan 5 12:33:18 2010 UTC
# Line 11  Format: Line 11  Format:
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>,  status: version number fixing the embedded copy, <unfixed>, <removed>,
14          <itp> or <unknown> if the version number can not be determined          <itp>, <not-affected>, <unknown> if the version number can not
15          <unfixable> for unavoidable cases (e.g., forks that add real value)          be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embeds a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and        modified-embed (embeds a code copy that differs from upstream code)
20              thus might share parts of the source code)        fork (a full-blown fork of another source package)
21        old-version (the package is an older version of essentially        old-version (an older version of essentially the same code)
                    the same code)  
22    
23  The srcpkg might be some string to identify the code if there is no  The srcpkg might be some string to identify the code if there is no
24  specific source package.  specific source package.
# Line 27  Everything up to the next line is ignore Line 27  Everything up to the next line is ignore
27  ---BEGIN  ---BEGIN
28  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
30          - pdftohtml <unknown>          - pdftohtml <unknown>
31          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
32          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
# Line 41  xpdf (some srcpkgs use xpdf2 code, some Line 38  xpdf (some srcpkgs use xpdf2 code, some
38          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
39          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
40          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - pdfkit.framework 0.8-4 (embed)  
41          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
42          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
44          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
45          - pdfedit <unfixed> (embed; bug #510794)          - pdfedit <unfixed> (embed; bug #510794)
46          - swftools <unfixed> (embed)          - swftools <unfixed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48    
49  ppmd  ppmd
50          - libcomplearn-mod-ppmd <unfixed> (fork)          - libcomplearn-mod-ppmd <unfixed> (fork)
# Line 58  libevent Line 55  libevent
55    
56  lrmi  lrmi
57          - read-edid 2.0.0-1 (embed; bug #495131)          - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59            - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61    
62  peercast  peercast
63          - gnome-peercast <unfixed> (embed)          - gnome-peercast <removed> (embed)
64          NOTE: gnome-peercast may better be removed, see #466539          [etch] - gnome-peercast <unfixed> (embed)
65    
66  silc-toolkit  silc-toolkit
67          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
# Line 78  libmikmod Line 78  libmikmod
78          TODO: report bug          TODO: report bug
79    
80  libiax  libiax
81          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
82    
83    spandsp
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
87          - dpkg <unfixed> (embed)          - dpkg <unfixed> (static)
88          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
89          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
90          NOTE: somehow derived code base          NOTE: somehow derived code base
# Line 111  zlib (lots of apps embed a copy, but lin Line 114  zlib (lots of apps embed a copy, but lin
114          - perl <unfixed>          - perl <unfixed>
115          - paraview <unfixed>          - paraview <unfixed>
116          - gcvs <unfixed>          - gcvs <unfixed>
         - erlang <unfixed>  
117          - dump <unfixed>          - dump <unfixed>
118          - aide <unfixed> (static)          - aide <unfixed> (static)
119          - dar <unfixed> (static)          - dar <unfixed> (static)
# Line 122  zlib (lots of apps embed a copy, but lin Line 124  zlib (lots of apps embed a copy, but lin
124          - lazarus <unfixed>          - lazarus <unfixed>
125          NOTE: inherited from fpc, see #472304          NOTE: inherited from fpc, see #472304
126          - erlang <unfixed> (embed)          - erlang <unfixed> (embed)
127            - gamera 3.2.3-1 (embed)
128            - python2.4 <unfixed> (embed; bug #553403)
129            - python2.5 <unfixed> (embed; bug #553403)
130    
131  dulwich  dulwich
132          - hg-git <unfixed> (embed; bug #541996)          - hg-git 0.1.0-1 (embed; bug #541996)
133    
134  libvigraimpex  libvigraimpex
135          - hugin <unfixed> (embed)          - hugin <unfixed> (embed; bug #542259)
136          - enblend-fuse <unfixed> (embed)          - enblend-enfuse <unfixed> (embed; bug #542258)
137            - gamera 3.2.3-1 (embed)
138    
139  libbz2  libbz2
140          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
141    
142  libgadu:  libgadu
143          - centericq <unfixed> (embed)          - centerim <unfixed> (embed; bug #559783)
144          - gaim <unfixed> (embed)          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
145          - pidgin <unfixed> (embed)(links dynamically against libgadu) (that should be fixed, then???)          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
146          - kdenetwork 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
147          NOTE: from kdenetwork: kopete          NOTE: from kdenetwork: kopete
         - gadu <unfixed> (embed)  
148          - ekg 1:1.8~rc0-1 (embed)          - ekg 1:1.8~rc0-1 (embed)
149          - kadu 0.6.0.2-3 (embed; bug #504430)          - kadu 0.6.0.2-3 (embed; bug #504430)
150          NOTE: gadu not packaged in Debian yet          - gadu <itp> (embed)
151    
152  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
153          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
# Line 156  shtool (affects build-time only) Line 161  shtool (affects build-time only)
161          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
162          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
163    
164  mozilla source code  xulrunner
165          - mozilla-firefox <unfixed> (embed)          - iceape <unfixed> (embed; bug #561749)
166          - mozilla-thunderbird <unfixed>          - iceweasel 2.0.0.19 (embed)
167          - firefox <removed>          - icedove <unfixed> (embed; bug #561750)
         - thunderbird <removed>  
         - iceweasel <unfixed> (embed)  
         - iceape <unfixed> (embed)  
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
168          - kompozer <unfixed> (embed; bug #532168)          - kompozer <unfixed> (embed; bug #532168)
169            - galeon 2.0.2-4 (embed)
170            - epiphany-browser 2.14.3-8 (embed)
171            - conkeror 0.9~git080629-2 (embed)
172            - kazehakase 0.4.2-1 (embed)
173    
174  xli  xli
175          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
# Line 176  lesstif (beware: two different lesstif A Line 179  lesstif (beware: two different lesstif A
179          - libxpm <unfixed> (embed)          - libxpm <unfixed> (embed)
180    
181  kerberized apps with BSD origin  kerberized apps with BSD origin
182          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
183          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
184          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
185    
# Line 192  fudforum Line 195  fudforum
195          [sarge] - egroupware-fudforum <removed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
196    
197  libbsd  libbsd
198          - rdate 1:1.2-3 (embed)          - rdate 1:1.2-3 (embed)
199          - atheme-services <unfixed>          - atheme-services <unfixed>
200          - libbsd-arc4random-perl <unfixed>          - libbsd-arc4random-perl <unfixed>
201          - isakmpd <unfixed>          - isakmpd <unfixed>
202            - bsdgames <unfixed> (embed)
203            - bsd-mailx <unfixed> (embed)
204            - netcat-openbsd <unfixed> (embed; bug #550611)
205            - openssh <unfixed> (embed)
206            - unworkable <unfixed> (embed)
207    
208  cvs  cvs
209          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
210          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
211    
212  pcre  pcre3
         - python* <unfixed> (embed)  
213          - php4 <unknown> (embed)          - php4 <unknown> (embed)
214          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
215          - goffice <unfixed> (embed)          - goffice <unfixed> (embed)
# Line 217  pcre Line 224  pcre
224          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
225          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
226          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
227          - tin <unknown> (embed)          - tin 980117-1 (embed)
228          - kazehakase 0.5.2-1          - kazehakase 0.5.2-1
229          - webkit <unfixed> (embed)          - webkit 1.0.1-1 (embed)
230          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
231          NOTE: embedded via webkit copy          NOTE: embedded via webkit copy
232          - erlang <unfixed> (embed)          - erlang <unfixed> (embed)
233            - ssed <unfixed> (embed)
234    
235  tiff  tiff
236          - wxwindows2.4 2.2.1 (embed)          - wxwindows2.4 2.2.1 (embed)
237            - gamera 3.2.3-1 (embed)
238    
239  uudeview  uudeview
240          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
# Line 235  sqlite (not affected by security vulnera Line 244  sqlite (not affected by security vulnera
244          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
245          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
246          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
247            - heimdal <unfixed> (embed; bug #559616)
248    
249  util-linux/mount  util-linux/mount
250          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
251          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
252    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
253  sylpheed  sylpheed
254          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
255    
# Line 266  ffmpeg (libavcodec/libavformat) Line 272  ffmpeg (libavcodec/libavformat)
272          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
273          - motion 3.1.19-1          - motion 3.1.19-1
274          - gstreamer0.10-ffmpeg 0.10.3-2          - gstreamer0.10-ffmpeg 0.10.3-2
275          - xmovie <unfixed>          - xmovie <removed> (static)
         NOTE: xmovie removed, only present in Etch  
276          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
277          - avifile <unfixed> (embed; bug #538750)          - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
278            - audacity 1.3.7-2 (embed; bug #512278)
279    
280  faad2  faad2
281          - mplayer 1.0~rc2-20 (embed)          - mplayer 1.0~rc2-20 (embed)
282          - avifile <unfixed> (embed; bug #538750)          - avifile <unfixed> (embed; bug #538750)
283            - ffmpeg-debian <removed> (old-version)
284    
285  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
286          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
287            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
288            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
289    
290  libdts  libdts
291          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 293  libmpeg2 Line 301  libmpeg2
301          - mpeg2dec <unfixed> (embed)          - mpeg2dec <unfixed> (embed)
302          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
303    
304  curl  libntlm
305          - wget <unfixed> (embed)          - wget <unfixed> (fork; bug #550436)
306          NOTE: code for NTLM authentication          - curl <unfixed> (fork; bug #550437)
307            - cntlm <unfixed> (fork; bug #550438)
308    
309  uw-imap  uw-imap
310          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 306  imagemagick Line 315  imagemagick
315    
316  python-urlgrabber  python-urlgrabber
317          - mercurial <unfixed> (embed; bug #531062)          - mercurial <unfixed> (embed; bug #531062)
318            - w3af <unfixed> (embed; bug #555372)
319            [experimental] - harvestman <unfixed> (embed; bug #555373)
320    
321  python-mechanize  beautifulsoup
322          - python-beautifulsoup <unfixed> (embed)          - python-mechanize <unfixed> (embed; bug #555349)
323            - zope2.11 <unfixed> (embed; bug #555350)
324            - twill <unknown> (embed)
325    
326  halibut  halibut
327          - nsis <unfixed> (fork)          - nsis <unfixed> (fork)
# Line 341  fckeditor Line 354  fckeditor
354          - karrigell <removed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
355          - gforge 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
356          - request-tracker3.8 <unfixed> (embed)          - request-tracker3.8 <unfixed> (embed)
357            - otrs2 <unfixed> (embed)
358    
359  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
360          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
# Line 357  libphp-phpmailer Line 371  libphp-phpmailer
371  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
372          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
373    
374  giflib:  giflib
375          - wine <unfixed> (embed; bug #466181)          - wine <unfixed> (embed; bug #466181)
376    
377  bennu (not packaged in Debian, http://bennu.sourceforge.net)  bennu (not packaged in Debian, http://bennu.sourceforge.net)
378          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
379    
380  smarty:  smarty
381          - moodle 1.8.2-2 (embed; bug #471158)          - moodle 1.8.2-2 (embed; bug #471158)
382          - gallery2 2.2.5-2 (embed; bug #471160)          - gallery2 2.2.5-2 (embed; bug #471160)
383          - mahara 0.9.2-2 (embed; bug #471201)          - mahara 0.9.2-2 (embed; bug #471201)
# Line 411  neon Line 425  neon
425          [etch] - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
426          - litmus <removed> (embed; #395875)          - litmus <removed> (embed; #395875)
427          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
428          - sitecopy 1:0.16.3-5 (embed; bug #395876)          - sitecopy 1:0.16.0-1 (embed; bug #395876)
429          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
430          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
431    
# Line 424  libvncserver Line 438  libvncserver
438  putty  putty
439          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
440    
441  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
442          - filezilla <unfixed>          - filezilla <unfixed>
443            - crystalspace <unfixed> (embed)
444            - libwfut <unfixed> (embed)
445            - rarian <unfixed> (embed)
446            - bulletml <unfixed> (embed)
447            - pokerth <unfixed> (embed)
448            - qutecom <unfixed> (embed)
449            - sofa-framework <unfixed> (embed)
450            - yate <unfixed> (embed)
451            - antigrav <unfixed> (embed)
452            - balder2d <unfixed> (embed)
453            - cal3d <unfixed> (embed)
454            - criticalmass <unfixed> (embed)
455            - ember <unfixed> (embed)
456            - epiphany <unfixed> (embed)
457            - gambit <unfixed> (embed)
458            - noiz2sa <unfixed> (embed)
459            - ogre <unfixed> (embed)
460            - opencity <unfixed> (embed)
461            - openmovieeditor <unfixed> (embed)
462            - pouetchess <unfixed> (embed)
463            - tecnoballz <unfixed> (embed)
464            - trigger-rally <unfixed> (embed)
465            - xmoto <unfixed> (embed)
466            - mapnik <unknown> (embed)
467            NOTE: uses a different XML parser by default
468            - rrootage 0.23a-6 <embed>
469            NOTE: links to libbulltetml
470            - boson <unknown> (embed)
471            NOTE: the embedded code is unused
472    
473  gv  gv
474          - evince <unfixed> (embed)          - evince <unfixed> (embed)
475          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
476          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
477    
478  libXbae  libXbae
479          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
480          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
481    
482  libgtkhtml  libgtkhtml
483          - claws-mail-html2-viewer <unfixed> (fork)          - claws-mail-extra-plugins <unfixed> (fork)
484    
485  libXaw  libXaw
486          [etch] - libpawlib2-lesstif <unfixed>          - paw <removed> (embed)
487          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
488          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
489    
490  libgd2  libgd2
# Line 480  librpcsecgss Line 522  librpcsecgss
522          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
523    
524  jasper  jasper
525          - ghostscript <unfixed> (embed)          - ghostscript 8.64~dfsg-2 (embed)
         - gs-gpl <unfixed> (embed)  
526    
527  libiris  libiris
528          - psi <unfixed> (embed)          - psi <unfixed> (embed)
# Line 497  libidn Line 538  libidn
538          - kdegames <unfixed> (embed)          - kdegames <unfixed> (embed)
539          NOTE: kdegames/kde4 embeds libiris which embeds libidn          NOTE: kdegames/kde4 embeds libiris which embeds libidn
540    
541  liblua  lua5.1
542          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
543          - nmap <unfixed> (embed; bug #527997)          - nmap 5.00-1 (embed; bug #527997)
544          NOTE: fixed upstream as of nmap svn rev13336.          [lenny] - nmap <unfixed> (embed; bug #527997)
545            - ocropus <unfixed> (embed)
546            - enigma <unfixed> (embed)
547            NOTE: requires lua built with C++
548            - freeciv <unfixed> (embed)
549            - spring <unfixed> (embed)
550    
551  libbotan  libbotan
552          - monotone 0.43-1 (embed)          - monotone 0.43-1 (embed)
# Line 536  guichan Line 582  guichan
582  tolua  tolua
583          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
584          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
585            NOTE: actually tolua++
586            - ocropus <unfixed> (embed)
587            NOTE: actually tolua++
588            - freeciv <unfixed> (embed)
589            NOTE: actually tolua++
590            - enigma <unfixed> (embed)
591    
592  asio-dev  asio-dev
593          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
594    
595  xine-lib  xine-lib
596          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 573  fribidi Line 623  fribidi
623  glew  glew
624          - quesoglc <unfixed> (embed; bug #489341)          - quesoglc <unfixed> (embed; bug #489341)
625          NOTE: waiting on GLEW_MX version of glew (see bug #474488)          NOTE: waiting on GLEW_MX version of glew (see bug #474488)
626            - trigger <unfixed> (embed)
627            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
628            - trigger-rally <unfixed> (embed)
629            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
630    
631  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
632          - transcend <unfixed> (embed)          - transcend <unfixed> (embed)
# Line 589  cpio Line 643  cpio
643          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
644    
645  webkit  webkit
646          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed; bug #479851)
647            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
648            [lenny] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
649            - kdelibs <unfixed> (old-version)
650            - kde4libs <unfixed> (fork)
651    
652  ftgl  ftgl
653          - blender 2.46+dfsg-1 (embed)          - blender 2.46+dfsg-1 (embed)
# Line 599  wv Line 657  wv
657    
658  qemu  qemu
659          - kvm <unfixed> (embed; bug #543159)          - kvm <unfixed> (embed; bug #543159)
660          - xen-3 <unfixed> (embed)          NOTE: the kvm package will be removed from sid and squeeze soon (after
661          - xen-unstable <unfixed> (embed)          NOTE: which it will only be in experimental). superceded by qemu-kvm.
662            - qemu-kvm <unfixed> (embed; bug #560853)
663            - xen-3 3.4.2-2 (embed; bug #560856)
664            - xen-unstable <unfixed> (embed; bug #560856)
665    
666  vgabios  vgabios
667          - kvm <unfixed> (embed; bug #489442)          - kvm <unfixed> (embed; bug #489442)
# Line 614  speex Line 675  speex
675          - gst-plugins-good0.10 <unfixed> (embed)          - gst-plugins-good0.10 <unfixed> (embed)
676          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
677          - libfishsound <unfixed> (embed)          - libfishsound <unfixed> (embed)
678          - libannodex <unfixed> (embed)          - libannodex <removed> (embed)
679          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
680          - xmms-speex <unfixed> (embed)          - xmms-speex <unfixed> (embed)
681          - libsdl-sound1.2 <unfixed> (embed)          - libsdl-sound1.2 <unfixed> (embed)
682          - sweep <unfixed> (embed)          - sweep <unfixed> (embed)
683    
684  libreadline  libreadline
685          - magic <unfixed> (old-version)          - magic <itp> (old-version)
         NOTE: magic is currently an RFS  
686    
687  opcode  opcode
688          - ode <unfixed> (embed)          - ode <unfixed> (embed)
# Line 638  mochikit Line 698  mochikit
698          - mahara <unfixed> (embed)          - mahara <unfixed> (embed)
699          NOTE: they require extra patches, still unmerged upstream          NOTE: they require extra patches, still unmerged upstream
700          - ntop <unfixed> (embed)          - ntop <unfixed> (embed)
701          - coherence <unfixed> (embed)          - coherence 0.6.2-1 (embed)
         NOTE: python-coherence  
702          - paste <unfixed> (embed)          - paste <unfixed> (embed)
         NOTE: python-paste  
703          - turbogears <unfixed> (embed)          - turbogears <unfixed> (embed)
         NOTE: python-turbogears  
704          - plone3 <unfixed> (embed)          - plone3 <unfixed> (embed)
705          NOTE: zope-plone3          - xulrunner <unfixed> (embed)
706            - libjifty-plugin-chart-perl <unfixed> (embed)
707  prototype          - sabnzbdplus <unfixed> (embed)
708          - netbeans-ide <unfixed> (embed)          - tgmochikit <unfixed> (embed)
709          - auth2db-frontend <unfixed> (embed)  
710          - webcit <unfixed> (embed)  prototypejs
711          NOTE: citadel-webcit          - netbeans-ide 6.0.1+dfsg-2 (embed)
712          - asterisk <unfixed> (embed)          - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
713          - doc-iana <unfixed> (embed)          - webcit <unfixed> (embed; bug #555219)
714          - libaws <unfixed> (embed)          - asterisk 1:1.6.2.0~rc3-1 (embed)
715          NOTE: libaws-doc          - libjson-ruby 1.1.4-1 (embed; bug #555224)
716          - libgettext-ruby <unfixed> (embed)          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
717          NOTE: libgettext-ruby-data          - horde3 <unfixed> (embed)
718          - libjson-ruby <unfixed> (embed)          - knowledgeroot <unfixed> (embed; bug #555230)
719          NOTE: libjson-ruby-doc          - mediatomb <unfixed> (embed; bug #555233)
720          - lucene2 <unfixed> (embed)          - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
721          NOTE: liblucene2-java-doc          - ebug-http <removed> (embed; bug #555236)
722          - libopenid-ruby <unfixed> (embed)          - libaws 2.7-1 (embed; bug #555222)
         - solr <unfixed> (embed)  
         NOTE: solr-common  
         - glpi <unfixed> (embed)  
         - hobbix <unfixed> (embed)  
         - mnemo2 <unfixed> (embed)  
         - nag2 <unfixed> (embed)  
         - knowledgeroot <unfixed> (embed)  
         - mediatomb <unfixed> (embed)  
         NOTE: mediatomb-common  
         - mt-daapd <unfixed> (embed)  
         - op-panel <unfixed> (embed)  
         - ebug-http <unfixed> (embed)  
723          - phpgedview <removed> (embed)          - phpgedview <removed> (embed)
724          - poker-network <unfixed> (embed)          - poker-network <removed> (embed; bug #555238)
725          NOTE: poker-web          - rails 2.1.0-6 (embed)
726          - webhelpers <unfixed> (embed)          - wordpress 2.5.0-2 (embed; bug #555243)
727          NOTE: python-webhelpers          - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
728          - qwik <unfixed> (embed)          TODO: search through all of the other zope packages
         - rails <unfixed> (embed)  
         - typo3-src <unfixed> (embed)  
         - wordpress 2.5.0-2 (embed)  
         - zope <unfixed> (embed)  
         NOTE: zope-plone3  
         - smokeping <unfixed> (embed)  
729          - ampache 3.4.1-2 (embed)          - ampache 3.4.1-2 (embed)
730          - exaile <unfixed> (embed)          - exaile 0.2.14+debian-2.1 (embed; bug #555245)
731          - hobix <unfixed> (embed)          - hobix 0.5~svn20070319-4 (embed; bug #555247)
732          - pixelpost <unfixed> (embed)          - zabbix 1.6.6-4 (embed; bug #555250)
733          - symfony <unfixed> (embed)          - chora2 <unfixed> (embed; bug #555253)
734          NOTE: it's been said that there are custom changes          - gollem <unfixed> (embed; bug # 555254)
735          - zabbix <unfixed> (embed)          - jscropperui 1.2.1-1 (embed; bug #555257)
736          NOTE: zabbix-frontend-php          - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
737          - turba2 <unfixed> (embed)          - ingo1 <unfixed> (embed; bug #555261)
738            - kronolith2 <unfixed> (embed; bug #555262)
739            - activeldap <unfixed> (embed)
740            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
741            - mantis <unfixed> (embed; bug #555265)
742            - otrs2 2.3.4-6 (embed; bug #555267)
743            - webcalendar <unfixed> (embed; bug #555269)
744            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
745            - jifty 0.90519-1 (embed; bug #555271)
746            - jquery <unfixed> (embed; bug #555272)
747            - passenger 2.2.5debian1-1 (embed; bug #555273)
748            - plone3 <unfixed> (embed; bug #555275)
749            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
750            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
751            - xulrunner <unfixed> (embed)
752            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
753    
754  gdb  gdb
755          - insight <unfixed> (embed)          - insight <unfixed> (embed)
# Line 718  java Line 772  java
772    
773  libphp-snoopy  libphp-snoopy
774          - ampache 3.4.1-2 (embed; bug #504169)          - ampache 3.4.1-2 (embed; bug #504169)
775            - gforge 4.6.99+svn6094-2 (embed)
776          - mahara 1.0.5-2 (embed; bug #504170)          - mahara 1.0.5-2 (embed; bug #504170)
777          - pixelpost 1.7.1-5 (embed; bug #504171)          - pixelpost 1.7.1-5 (embed; bug #504171)
778          - mediamate 0.9.3.6-5 (embed; bug #504172)          - mediamate 0.9.3.6-5 (embed; bug #504172)
# Line 758  magpierss Line 813  magpierss
813    
814  php-gettext  php-gettext
815          - wordpress 2.8.4-1 (embed; bug #504242)          - wordpress 2.8.4-1 (embed; bug #504242)
816            - docbookwiki <unfixed> (embed)
817            NOTE: non-free
818    
819  libphp-ixr (name may change, it is the Incutio XML-RPC)  libphp-ixr (name may change, it is the Incutio XML-RPC)
820          - wordpress <unfixed> (embed; bug #504242)          - wordpress <unfixed> (embed; bug #504242)
# Line 769  libphp-cas Line 826  libphp-cas
826          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
827          - moodle <unfixed> (embed; bug #505984)          - moodle <unfixed> (embed; bug #505984)
828    
829  scriptaculous  scriptaculous (prototype.js is among the embeds in the following)
830          - glpi <unfixed> (embed)          - glpi <unfixed> (embed)
831          - libaws <unfixed> (embed)          - libaws <unfixed> (embed; bug #555222)
         NOTE: libaws-doc  
832          - op-panel <unfixed> (embed)          - op-panel <unfixed> (embed)
833          - symfony <unfixed> (embed)          - symfony <unfixed> (embed)
834          NOTE: maintainer says there are extra incompatible changes required          NOTE: maintainer says there are extra incompatible changes required
835          - pixelpost <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
836          - webhelpers <unfixed> (embed)          - webhelpers <unfixed> (embed)
837          NOTE: python-webhelpers          - qwik <removed> (embed; bug #555241)
         - qwik <unfixed> (embed)  
838          - smokeping <unfixed> (embed)          - smokeping <unfixed> (embed)
839          - turba2 <unfixed> (embed)          - turba2 <unfixed> (embed)
840          - typo3-src 4.2.3-1 (embed)          - typo3-src 4.2.3-1 (embed)
841            - request-tracker3.6 <unfixed> (embed)
842            - request-tracker3.8 <unfixed> (embed)
843            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
844            - wordpress 2.5.0-2 (embed)
845            - libhtml-prototype-perl 1.48-3 (embed)
846    
847  libmarkdown-php  libmarkdown-php
848          - moodle <unfixed> (embed; bug #507185)          - moodle <unfixed> (embed; bug #507185)
849          - pixelpost <unfixed> (embed)          - pixelpost 1.7.1-6 (embed)
850    
851  php-openid  php-openid
852          - wordpress-openid <itp> (embed)          - wordpress-openid <itp> (embed)
# Line 797  geshi Line 857  geshi
857          - websvn 2.1.0-1 (embed)          - websvn 2.1.0-1 (embed)
858    
859  webcalendar  webcalendar
860          - gforge-plugins-extra 4.7~rc2-6 (embed; bug #504758)          - gforge 4.7~rc2-6 (embed; bug #504758)
861    
862  libical  libical
863          - kdepim <unfixed> (fork)          - kdepim <unfixed> (fork)
864          - kdepimlibs <unfixed> (fork)          - kdepimlibs <unfixed> (fork)
865          NOTE: fixed in KDE4 post 4.1.x series          NOTE: fixed in KDE4 post 4.1.x series
866          - claws-mail-vcalendar-plugin <unfixed> (fork)          - claws-mail-extra-plugins <unfixed> (fork)
867    
868  libltdl3  libltdl3
869          - kdelibs <unfixed> (embed)          - kdelibs <unfixed> (embed)
# Line 814  harfbuzz Line 874  harfbuzz
874          - qt4-x11 <unfixed> (embed)          - qt4-x11 <unfixed> (embed)
875    
876  libzip  libzip
877          - php5 <unfixed> (fork)          - php5 <unfixable> (modified-embed)
878          - odt2txt <unfixed> (embed; bug #523808)          - odt2txt <unfixed> (embed; bug #523808)
879    
880  json.php (not packaged; should be replaced with php's built-in functions)  json.php (not packaged; should be replaced with php's built-in functions)
# Line 869  libphp-pclzip Line 929  libphp-pclzip
929    
930  libphp-simplepie  libphp-simplepie
931          - dokuwiki <unfixed>          - dokuwiki <unfixed>
932            - wordpress <unfixed>
933    
934  libphp-jpgraph  libphp-jpgraph
935          - egroupware <unfixed>          - egroupware <unfixed>
# Line 877  php-simpletest Line 938  php-simpletest
938          - moodle <unfixed>          - moodle <unfixed>
939    
940  libpng  libpng
941          - iceweasel <unfixed> (embed)          - iceweasel <not-affected> (uses xulrunner)
942          NOTE: 3.0 uses embedded copy, 2.0 uses system libpng          - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
         - icedove: 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)  
943          - iceape 1.0.13~pre080614i-0etch1 (embed)          - iceape 1.0.13~pre080614i-0etch1 (embed)
944          - xulrunner <unfixed> (embed)          - xulrunner 1.9.0.13-1 (embed)
945          NOTE: Debian 1.9.0.6 uses embedded copy          [lenny] - xulrunner 1.9.0.11-0lenny1
946          NOTE: Ubuntu: 1.9.x use embedded copy, 1.8 and 1.8.1 use system libpng          [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
947          - firefox 1.5.dfsg+1.5.0.3-0ubuntu3, 2.0.0.6+2nobinonly-0ubuntu1 (embed)          - gamera 3.2.3-1 (embed)
         NOTE: Ubuntu only  
         - firefox-3.0 <unfixed> (embed)  
         NOTE: Ubuntu only  
         - firefox-3.1 <unfixed> (embed)  
         NOTE: Ubuntu only  
         - seamonkey 1.1.9+nobinonly-0ubuntu1 (embed)  
         NOTE: Ubuntu only  
         - thunderbird 2.0.0.6+nobinonly-0ubuntu1 (embed)  
         NOTE: Ubuntu only  
         - mozilla-thunderbird 1.5.0.2-0ubuntu2 (embed)  
         NOTE: Ubuntu only  
948    
949  irssi  irssi
950          - silc-client <unfixed> (embed)          - silc-client <unfixed> (embed)
# Line 913  libitext-java Line 962  libitext-java
962          - bouncycastle 2.1.4-1 (embed)          - bouncycastle 2.1.4-1 (embed)
963    
964  python-ply  python-ply
965          - pyke <unfixed> (embed)          - pyke <unfixed> (embed; bug #555363)
966            - pywbem 0.7.0-4 (embed; bug #555364)
967            - sepolgen <unfixed> (embed; bug #555365)
968            - zope-textindexng3 <unknown> (embed)
969            - iceweasel <not-affected> (uses xulrunner)
970            - xulrunner <unknown> (embed)
971            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
972    
973  libdumbnet (libdnet upstream)  libdumbnet (libdnet upstream)
974          - nmap <unfixed> (fork)          - nmap <unfixed> (fork)
# Line 922  gcc-4.4 Line 977  gcc-4.4
977          - gcc-mingw32 <unfixed> (embed)          - gcc-mingw32 <unfixed> (embed)
978    
979  camlimages  camlimages
980          - advi <unfixed> (embed)          - advi <unfixed> (static; bug #550441)
981    
982  memcached  memcached
983          - memcachedb <unfixed> (embed)          - memcachedb <unfixed> (embed)
984    
985  yajl (ITP: #537199)  yajl
986          - argyll <unfixed> (embed)          - argyll <unfixed> (embed; bug #544223)
987          NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html          NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
988    
989  libept:  nusoap
990            - gforge 4.8.2-1 (embed)
991            - ampache <unfixed> (embed)
992            - poker-web <unfixed> (old-version)
993            - moodle <unfixed> (old-version)
994            NOTE: code is not used when running under php5 and soap is enabled
995            - phpwiki <unfixed> (old-version)
996            - gallery2 <unfixed> (old-version)
997            - typo3-src <unfixed> (old-version)
998    
999    libept
1000          - adept <unfixed> (embed; bug #540649)          - adept <unfixed> (embed; bug #540649)
1001    
1002  libvorbis:  libvorbis
1003            - iceweasel <not-affected> (uses xulrunner)
1004          - xulrunner <unfixed> (embed; bug #540959)          - xulrunner <unfixed> (embed; bug #540959)
1005            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1006            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1007            - iceape <unfixed> (embed)
1008            [etch] - iceape <not-affected> (introduced in 2.0)
1009            [lenny] - iceape <not-affected> (introduced in 2.0)
1010    
1011  php-net-dnsbl:  cairo
1012          - serendipity <unfixed> (embed)          - iceweasel <not-affected> (uses xulrunner)
1013            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1014    
1015    liboggz
1016            - iceweasel <not-affected> (uses xulrunner)
1017            - xulrunner <unfixed> (embed; bug #540959)
1018            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1019            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1020            - iceape <unfixed> (embed)
1021            [etch] - iceape <not-affected> (introduced in 2.0)
1022            [lenny] - iceape <not-affected> (introduced in 2.0)
1023    
1024    liboggplay
1025            - iceweasel <not-affected> (uses xulrunner)
1026            - xulrunner <unfixed> (embed; bug #540959)
1027            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1028            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1029            - iceape <unfixed> (embed)
1030            [etch] - iceape <not-affected> (introduced in 2.0)
1031            [lenny] - iceape <not-affected> (introduced in 2.0)
1032    
1033  php-onyx-rss:  php-net-dnsbl
1034          - serendipity <unfixed> (embed)          - serendipity <unfixed> (embed; bug #541740)
1035    
1036  php-text-wiki:  php-onyx-rss
1037          - serendipity <unfixed> (embed)          - serendipity <unfixed> (embed; bug #541740)
1038    
1039  php-xml-rpc:  php-text-wiki
1040          - serendipity <unfixed> (embed)          - serendipity <unfixed> (embed; bug #541740)
1041    
1042  xyssl (does not have a shared library)  php-xml-rpc
1043          - polarssl <unfixed> (fork)          - serendipity <unfixed> (embed; bug #541740)
1044    
1045  polarssl (does not have a shared library)  polarssl (does not have a shared library)
1046          - pdkim <itp> (embed)          - pdkim <itp> (embed; bug #543150)
1047          NOTE: pdkim ITP #543150          - xyssl <unfixed> (old-version)
1048    
1049    pidgin
1050            - gaim <removed> (old-version)
1051            - qutecom <unfixed> (embed; bug #559785)
1052    
1053    icu
1054            - webkit 1.0.1-1 (embed; bug #547214)
1055            - texlive-bin <unfixed> (fork)
1056            NOTE: texlive upstream working with icu upstream to merge their changes
1057    
1058    cyrus-imapd-2.2
1059            - kolab-cyrus-imapd <unfixed> (fork)
1060            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1061    
1062    python-cxx-dev
1063            - freecad 0.9.2646.3-1 (embed; bug #547936)
1064    
1065    zipios++
1066            - freecad 0.9.2646.3-1 (embed; bug #547941)
1067            - enigma 0.92.3-3 (embed)
1068            NOTE: likely fixed earlier, marking etch's version as fixed
1069    
1070    linux-2.6
1071            - kvm <removed> (embed; bug #549973) [./kernel/*]
1072            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1073            - kernel-source-2.6.8 <removed> (old-version)
1074            - kernel-source-2.4.27 <removed> (old-version)
1075            - kernel-source-2.4.24 <removed> (old-version)
1076            - kernel-source-2.2.25 <removed> (old-version)
1077            - kernel-source-2.2.20 <removed> (old-version)
1078    
1079    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1080            - kvm <removed> (embed) [./libfdt/*]
1081            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1082    
1083    qweb (not packaged)
1084            - ajaxterm <unfixed>
1085    
1086    opensaml2
1087            - opensaml <removed> (old-version)
1088    
1089    shibboleth-sp2
1090            - shibboleth-sp <removed> (old-version)
1091    
1092    tuxonice-userui
1093            - suspend2-userui <removed> (old-version)
1094    
1095    expat
1096            - w3c-libwww <removed> (embed; bug #551941)
1097            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1098            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1099            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1100            - python2.4 <unfixable> (embed; bug #553403)
1101            - python-4suite <unfixed> (embed; bug #516935)
1102            - wxwindows2.4 <removed> (embed)
1103            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1104            - wxwidgets2.8 2.8.10.1-2 (embed)
1105            - celementtree 1.0.5-8 (embed)
1106            NOTE: Maybe that was fixed even earlier
1107            - audacity 1.3.2-1 (embed)
1108            - matanza <unfixed> (embed)
1109            - tdom 0.8.3~20080525-1 (embed)
1110            - udunits 2.1.8-4 (embed)
1111            - apr-util 1.2 (embed)
1112            - ayttm <unfxed> (embed; bug #561006)
1113            - cableswig <unfixed> (embed)
1114            - cadaver <unfixed> (embed)
1115            - cmake 2.6.0-6 (embed)
1116            - coin3 <unfixed> (embed)
1117            - gdcm 2.0.14-2 (embed)
1118            - ghostscript <unfixed> (embed)
1119            - grmonitor <removed> (embed)
1120            - iceape <unfixed> (embed)
1121            - insighttoolkit 3.16.0-1 (embed)
1122            NOTE: insighttoolkit might've been fixed earlier
1123            - libparagui1.1 1.0.2-1 (embed)
1124            - paraview <unfixed> (embed)
1125            - poco <unfixed> (embed)
1126            - simgear <unfixed> (embed)
1127            - sitecopy 1:0.16.0-1
1128            - smart 1.0-1 (embed)
1129            - swish-e <unfixed> (embed)
1130            - tla <unfixed> (embed)
1131            - vtk 4.1.20030227-1 (embed)
1132            - wbxml2 <unfixed> (embed)
1133            - xmlrpc-c <unfixed> (embed)
1134            - iceweasel <unfixed> (embed)
1135            - kompozer <unfixed> (embed)
1136            - vxl 1.13.0-2 (embed)
1137            - xulrunner <unfixed> (embed)
1138            - apache2 2.2 (embed)
1139            - texlive-bin <not-affected> (Embedded code not compiled in)
1140            - vnc4 <unfixed> (embed)
1141            - xotcl <unfixed> (embed)
1142    
1143    xerces-c
1144            - xerces-c2 <unfixed> (old-version)
1145            - xerces27 <removed> (old-version)
1146    
1147    md5 (RSA's version; not the gnu version provided by coreutils)
1148            - w3c-libwww <removed> (embed; bug #551942)
1149            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1150    
1151    enet
1152            - sauerbraten <unfixed> (embed; #497194)
1153    
1154    eglibc
1155            - glibc <removed> (old-version)
1156    
1157    galib
1158            - gamera 3.2.3-1 (embed)
1159    
1160    configobj
1161            - bzr <unfixed> (embed; bug #555336)
1162            - elisa <unfixed> (embed; bug #555337)
1163            - gaupol <unfixed> (embed; bug #555338)
1164            - ipython <unfixed> (embed; bug #555339)
1165            - pida <unfixed> (embed; bug #555340)
1166            - psychopy <unfixed> (embed; bug #555341)
1167            - rest2web <unfixed> (embed; bug #555342)
1168            - auth2db <unknown> (embed)
1169            - dynagen <unknown> (embed)
1170            - iceweasel <unknown> (embed)
1171            - sabnzbdplus <unknown> (embed)
1172            - xulrunner <unknown> (embed)
1173            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1174    
1175    python-clientform
1176            - bibus <unfixed> (embed; bug #555332)
1177            - zope2.10 <unfixed> (embed; bug #555333)
1178            - zope2.11 <unfixed> (embed; bug #555334)
1179            - python-mechanize <unknown> (embed)
1180            - twill <unknown> (embed)
1181    
1182    python-mechanize
1183            - zope2.10 <unfixed> (embed; bug #555337)
1184            - zope2.11 <unfixed> (embed; bug #555338)
1185            - twill <unknown> (embed; bug #555339)
1186    
1187    pexpect
1188            - duplicity 0.6.06-1 (embed; bug #555361)
1189            - hplip <unfixed> (embed; bug #555362)
1190            - smart <unfixed> (embed; bug #555363)
1191    
1192    pyparsing
1193            - bauble <unfixed> (embed; bug #555366)
1194            - boa-constructor 0.6.1-8 (embed; bug #555367)
1195            - calibre <unfixed> (embed; bug #555368)
1196            - matplotlib <unfixed> (embed; bug #531024)
1197            - zhpy <unfixed> (embed; bug #555370)
1198            - polybori <unknown> (embed)
1199            - python-whoosh <unknown> (embed)
1200            - twill <unknown> (embed)
1201            - zope-textindexng3 <unknown> (embed)
1202    
1203    python-pysqlite2
1204            - python2.4 <unfixed> (embed; bug #553403)
1205            - python2.5 <unfixed> (embed; bug #553403)
1206    
1207    celementtree
1208            - python2.5 <unfixed> (embed)
1209            - smart 1.0-1 (embed)
1210            [etch] - smart <unfixed> (embed)
1211    
1212    elementtree
1213            - python2.5 <unfixed> (embed)
1214            - bzr <unfixed> (embed; bug #555343)
1215            - gedit 2.28.2-1 (embed; bug #555344)
1216            - smart 1.0-1 (embed)
1217            [etch] - smart <unfixed> (embed)
1218            - solfege <unfixed> (embed; bug #555345)
1219            - w3af <unfixed> (embed; bug #555346)
1220            - python-qt4 <unknown> (embed)
1221            - sphinx <unknown> (embed)
1222            - python-nltk <itp> (embed)
1223    
1224    python2.5
1225            - python2.4 <unfixed> (old-version)
1226            - jython <unfixed> (embed)
1227            NOTE: embeds many stdlib modules
1228            - python-django <unfixed> (embed; bug #555419)
1229            NOTE: embeds stdlib modules: doctest, decimal
1230            - gamera 3.2.3-1 (embed)
1231            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1232            - boa-constructor <unfixed> (embed; bug #555426)
1233            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1234            - nicotine <unfixed> (embed; bug #555427)
1235            NOTE: embeds stdlib modules: ConfigParser
1236            - museek+ <unfixed> (embed; bug #555428)
1237            NOTE: embeds stdlib modules: ConfigParser
1238            - vegastrike-data <unfixed> (embed)
1239            NOTE: embeds many stdlib modules
1240            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1241            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1242            - config-manager <unfixed> (embed; bug #555423)
1243            NOTE: embeds stdlib modules: optparse
1244            - jhbuild 2.28.0-1 (embed; bug #555421)
1245            NOTE: embeds stdlib modules: optparse, subprocess
1246            - smart <unfixed> (embed; bug #555432)
1247            NOTE: embeds stdlib modules: optparse
1248            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1249            NOTE: embeds stdlib modules: doctest
1250            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1251            NOTE: embeds stdlib modules: doctest
1252            - distribute <unfixed> (embed)
1253            NOTE: embeds stdlib modules: doctest
1254            - python-setuptools <unfixed> (embed; bug #555435)
1255            NOTE: embeds stdlib modules: doctest
1256            - zope.testing <unfixed> (embed; bug #555436)
1257            NOTE: embeds stdlib modules: doctest
1258            - translate-toolkit <unfixed> (embed; bug #555422)
1259            NOTE: embeds stdlib modules: textwrap, contextlib
1260            - libtpclient-py <unfixed> (embed; bug #555424)
1261            NOTE: embeds stdlib modules: subprocess
1262            - grass <unfixed> (embed; bug #555425)
1263            NOTE: embeds stdlib modules: subprocess
1264            - coherence <unfixed> (embed; bug #555429)
1265            NOTE: embeds stdlib modules: uuid
1266            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1267            NOTE: embeds stdlib modules: uuid
1268            - setroubleshoot <unfixed> (embed; bug #555431)
1269            NOTE: embeds stdlib modules: uuid
1270            - linkchecker <unfixed> (embed; bug #555414)
1271            NOTE: embeds msgfmt.py script
1272            - imdbpy <unfixed> (embed)
1273            NOTE: embeds msgfmt.py script
1274            - kiwi <unfixed> (embed)
1275            NOTE: embeds msgfmt.py script
1276            - moin <unfixed> (embed)
1277            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1278            - plone3 <unfixed> (embed)
1279            NOTE: embeds msgfmt.py script
1280            - roundup <unfixed> (embed)
1281            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1282            - rednotebook <unfixed> (embed; bug #555415)
1283            NOTE: embeds msgfmt.py script
1284            - turbogears <unfixed> (embed)
1285            NOTE: embeds msgfmt.py script
1286            - elisa <unfixed> (embed)
1287            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1288            - calibre <unfixed> (embed)
1289            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1290            - mailman 1:2.1.13-1 (embed; #555416)
1291            NOTE: embeds msgfmt.py script
1292            - python-docutils <unknown> (embed)
1293            NOTE: embeds stdlib modules: optparse, textwrap
1294            - python-imaging <unknown> (embed)
1295            NOTE: embeds stdlib modules: doctest
1296            - python-mechanize <unknown> (embed)
1297            NOTE: embeds stdlib modules: doctest
1298            - twill <unknown> (embed)
1299            NOTE: embeds stdlib modules: subprocess
1300            - zeroc-ice <unknown> (embed)
1301            NOTE: embeds stdlib modules: subprocess
1302            - wxwidgets2.8 <unknown> (embed)
1303            NOTE: embeds stdlib modules: subprocess
1304            - cycle <unknown> (embed)
1305            NOTE: embeds msgfmt.py script
1306            - deluge <unknown> (embed)
1307            NOTE: embeds msgfmt.py script
1308            - opendict <unknown> (embed)
1309            NOTE: embeds msgfmt.py script
1310            - openerp-client <unknown> (embed)
1311            NOTE: embeds msgfmt.py script
1312            - rapidsvn <unknown> (embed)
1313            NOTE: embeds msgfmt.py script
1314            - wammu <unknown> (embed)
1315            NOTE: embeds msgfmt.py script
1316            - gaphor <unknown> (embed)
1317            NOTE: embeds msgfmt.py script
1318            - pida <unknown> (embed)
1319            NOTE: embeds msgfmt.py script
1320            - python-formencode <unknown> (embed)
1321            NOTE: embeds msgfmt.py script
1322            - duplicity <unfixed> (embed)
1323            NOTE: embeds stdlib module: urlparse, tarfile
1324            - pygopherd <unfixed> (embed)
1325            NOTE: embeds stdlib module: zipfile
1326    
1327    argparse
1328            - twill <unfixed> (embed; bug #555347)
1329            - ipython <unfixed> (embed; bug #555348)
1330    
1331    coherence
1332            - elisa <unfixed> (embed; bug #555335)
1333    
1334    simpletal
1335            - plastex <unfixed> (embed; bug #555371)
1336    
1337    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1338            - postr <unfixed> (embed)
1339            - elisa <unfixed> (embed)
1340    
1341    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1342            - apertium-tolk <unfixed> (embed)
1343            - ipython <unfixed> (embed)
1344            - virtaal <unfixed> (embed)
1345    
1346    distribute
1347            - setuptools <removed> (old-version)
1348    
1349    rails
1350            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1351            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1352            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1353            - thin <unfixed> (embed) [./spec/rails_app/*]
1354            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1355            NOTE: be dangerous if developers are naively basing their code off of the examples
1356            NOTE: prototype.js is among the example files
1357    
1358    lucene2 (prototype.js is among the embeds in the following)
1359            - lucene <unfixed> (old-version)
1360            - pylucene <unfixed> (embed)
1361            - libpdfbox-java <unfixed> (embed)
1362            - libfontbox-java <unfixed> (embed)
1363            - libjempbox-java <unfixed> (embed)
1364            - solr <unfixed> (embed)
1365    
1366    unicode-data
1367            - syslinux <unfixed> (embed)
1368            - camomile <unfixed> (embed)
1369            - fribidi <unfixed> (embed)
1370            - m17n-db <unfixed> (embed)
1371            - sbcl <unfixed> (embed)
1372            - heimdal <unfixed> (embed)
1373            - icu <unfixed> (embed)
1374            - icu4j <unfixed> (embed)
1375            - krb5 <unfixed> (embed)
1376            - moodle <unfixed> (embed)
1377            - openldap <unfixed> (embed)
1378            - pike7.6 <unfixed> (embed)
1379            - samba <unfixed> (embed)
1380            - samba4 <unfixed> (embed)
1381            - cmucl <unfixed> (embed)
1382            - typo3-src <unfixed> (embed)
1383            - mauve <unfixed> (embed)
1384            - texlive-bin <unfixed> (embed)
1385            - ypsilon <unfixed> (embed)
1386            - jeuclid <unfixed> (embed)
1387            - charmap.app <unfixed> (embed)
1388            - clisp <unfixed> (embed)
1389            - gnulib <unfixed> (embed)
1390            - opensrs-client <unfixed> (embed)
1391            - saxonb <unfixed> (embed)
1392            - rails <unfixed> (embed)
1393    
1394    feedparser
1395            - rawdog <unfixed> (embed; bug #383422)
1396            - miro <unfixed> (embed; bug #555351)
1397            - calibre <unfixed> (embed; bug #555352)
1398            - freevo <unfixed> (embed; bug #555353)
1399            - pida <unfixed> (embed; bug #555354)
1400            - planet-venus <unfixed> (embed; bug #555355)
1401            - plone3 <unfixed> (embed; bug #555356)
1402            - exaile 0.2.14+debian-1 (embed)
1403            - screenlets 0.1.2-3 (embed)
1404            NOTE: included twice
1405    
1406    agg:
1407            - matplotlib <unfixed> (embed: bug #377271)
1408            - contextfree <unfixed> (embed)
1409            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1410            - exactimage <unfixed> (embed)
1411            - python-enable <unfixed> (embed)
1412            - mapnik 0.5.1-3 (embed)
1413            NOTE: links statically to agg, but shared library is not available (bug #377271)
1414    
1415    vtk
1416            - paraview <unfixable> (embed; bug #495426)
1417    
1418    txt2tags
1419            - rednotebook <unfixed> (embed)
1420    
1421    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1422            - gajim <unfixed> (embed)
1423            - emesene <unfixed> (embed)
1424            - convirt <unfixed> (embed)
1425            - pida <unfixed> (embed)
1426            - rednotebook <unfixed> (embed)
1427    
1428    horde3 (prototype.js is among the embeds in the following)
1429            - mnemo2 <unfixed> (embed)
1430            - nag2 <unfixed> (embed)
1431            - wordpress <unfixed> (embed)
1432            NOTE: Text_Diff (wp-includes/Text/Diff*)
1433    
1434    cimg
1435            - gmic <itp> (embed)
1436    
1437    mootools
1438            - gmic <itp> (embed)
1439    
1440    openldap
1441            - openldap2.3 <removed> (old-version)
1442    
1443    grub2
1444            - grub <unfixed> (old-version)
1445    
1446    gnupginterface
1447            - duplicity <unfixed> (embed)
1448    
1449    python-dateutil
1450            - awn-extras-applets <unfixed> (embed)
1451            - matplotlib <unknown> (embed)
1452    
1453    cups
1454            - cupsys <removed> (old-version)
1455    
1456    yui
1457            - bcfg2 <not-affected> (present in source but not included in any binary files)
1458            - serendipity <unfixed> (embed; bug #557746)
1459            - moodle 1.8.2.dfsg-5 (embed)
1460            - jifty 0.91117-1 (embed; bug #557748)
1461            - webgui 7.7.26-1 (embed)
1462            - loggerhead 1.17-1 (embed)
1463    
1464    quake3 (vanilla source not packaged in debian)
1465            - openarena <unfixable> (fork)
1466    
1467    quake2 (vanilla source not packaged in debian)
1468            - alien-arena <unfixable> (fork)
1469            - warsow <unfixable> (fork)
1470    
1471    libtheora
1472            - iceweasel <not-affected> (uses xulrunner)
1473            - xulrunner <unfixed> (embed; bug #540959)
1474            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1475            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1476            - iceape <unfixed> (embed; bug #559276)
1477            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1478            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1479    
1480    dtoa
1481            - bfilter <unfixed> (embed)
1482            - cacao <unfixed> (embed)
1483            - cdrdao <unfixed> (embed)
1484            - classpath <unfixed> (embed)
1485            - freej <unfixed> (embed)
1486            - iceape <unfixed> (embed)
1487            - iceweasel <unfixed> (embed)
1488            - jscoverage <unfixed> (embed)
1489            - kde4libs <unfixed> (embed)
1490            - kdelibs <unfixed> (embed)
1491            - kompozer <unfixed> (embed)
1492            - libv8 <unfixed> (embed)
1493            - mono <unfixed> (embed)
1494            - newlib <unfixed> (embed)
1495            - nspr <unfixed> (embed)
1496            - php5 <unfixed> (embed)
1497            - polyml <unfixed> (embed)
1498            - qt4-x11 <unfixed> (embed)
1499            - rhino <unfixed> (embed)
1500            NOTE: code translated to Java
1501            - ruby1.8 <unfixed> (embed)
1502            - ruby1.9 <unfixed> (embed)
1503            - ruby1.9.1 <unfixed> (embed)
1504            - sdd <unfixed> (embed)
1505            - sfind <unfixed> (embed)
1506            - star <unfixed> (embed)
1507            - tinymux <unfixed> (embed)
1508            - virtualbox-ose <unfixed> (embed)
1509            - webkit <unfixed> (embed)
1510            - xulrunner <unfixed> (embed)
1511    
1512    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1513            - firegpg <unfixed> (embed)
1514            - enigmail <unfixed> (embed)
1515    
1516    ptmalloc (not packaged in Debian)
1517            - crystalspace <unfixed> (embed)
1518            - qt4-x11 <unfixed> (embed)
1519    
1520    svgalib
1521            - usplash <unfixed> (embed)
1522    
1523    bogl
1524            - usplash <unfixed> (embed)
1525    
1526    taglist
1527            - usplash <unfixed> (embed)
1528    
1529    portaudio
1530            - audacity <unfixed> (embed; bug #323711)
1531    
1532    nyquist
1533            - audacity <unfixed> (embed)
1534            NOTE: embeds a forked nyquist with support for a shared library
1535    
1536    vamp-plugin-sdk
1537            - audacity <unfixed> (embed)
1538    
1539    wordpress
1540            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1541    
1542    php5
1543            - php4 <removed> (old-version)
1544    
1545    classpath
1546            - libgnucrypto-java <unfixed> (embed; bug #559788)
1547    
1548    libtool
1549            - apr <unfixed> (static; bug #489625)
1550            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1551            - arts <unfixed> (embed)
1552            - bochs 2.4.2-1 (embed; bug #560884)
1553            - camserv <unfixed> (embed)
1554            - collectd <unfixed> (embed)
1555            - courier-authlib 0.58-4 (embed)
1556            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1557            - cvsnt <unfixed> (embed)
1558            - dico <not-affected> (Uses the system copy of ltdl)
1559            - freeradius 0.1+20010527-1 (embed)
1560            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1561            - ggobi 2.1.9~20091212-1 (embed)
1562            - glame 2.0.1-4 (embed)
1563            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1564            - gnash <unfixed> (embed)
1565            - gnu-smalltalk <unfixed> (embed)
1566            - google-gadgets 0.10.5-0.3 (embed)
1567            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1568            - graphicsmagick 1.3.5-6 (embed)
1569            - graphviz 2.8-3 (embed)
1570            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1571            - guile-1.6 1.6.8-7 (embed)
1572            - hamlib <unfixed> (embed)
1573            - hercules <unfixed> (embed)
1574            - jags 1.0.4-3 (embed; bug #560864)
1575            - kdelibs <unfixed> (embed)
1576            - libannodex <removed> (embed)
1577            - libextractor <unfixed> (embed)
1578            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1579            - libtunepimp <unfixed> (embed)
1580            - mp4h <unfixed> (embed)
1581            - naim <unfixed> (embed)
1582            - parser-mysql <unfixed> (embed)
1583            - pinball <unfixed> (embed)
1584            - redland <unfixed> (embed)
1585            - siproxd <unfixed> (embed)
1586            - ski <unfixed> (embed)
1587            - synfig <unfixed> (embed)
1588            - unixodbc 2.2.4-5 (embed)
1589            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1590            - clamav 0.95+dfsg-1 (embed)
1591            - imagemagick 6:6.2.3.1-1 (embed)
1592            - hypre 2.4.0b-5 (embed)
1593            - lam <unfixed> (embed)
1594            - openmpi <unfixable> (embed; bug #559386)
1595            - parser <unfixed> (embed)
1596            - pdsh 2.18-5 (embed; bug #560892)
1597            - sbnc 1.2-8 (embed)
1598            - sdcc <unfixed> (embed)
1599            - wml <unfixed> (embed)
1600            - proftpd-dfsg <unfixed> (embed; bug #561748)
1601            - babel 1.4.0.dfsg-5 (embed)
1602            - libprelude 0.9.14-2 (embed)
1603            - heartbeat 2.1.4-7 (embed)
1604            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1605            NOTE: might've been fixed earlier
1606            - gcc-* <unknown> (embed)
1607    
1608    ocamlgsl
1609            - orpie 1.5.1-7.1 (embed; bug #550058)
1610    
1611    xdotool
1612            - keynav <unfixed> (embed; bug #560103)
1613    
1614    bulletphysics (not packaged; http://www.bulletphysics.org/)
1615            - supertuxkart <unfixed> (embed)
1616            - blender <unfixed> (embed)
1617    
1618    ghostscript
1619            - gs-gpl <removed> (old-version)
1620    
1621    icedove
1622            - thunderbird <removed> (old-version)
1623    
1624    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1625            - libjs-jquery <unfixed> (embed)
1626    
1627    sed
1628            - ssed <unfixed> (fork)
1629    
1630    phpatomlib (http://code.google.com/p/phpatomlib)
1631            - wordpress <unfixed> (embed)
1632    
1633    Services_JSON (http://pear.php.net/package/Services_JSON)
1634            - wordpress <unfixed> (embed)
1635    
1636    phpass (http://www.openwall.com/phpass/)
1637            - gallery2 <unfixed> (embed)
1638            - wordpress <unfixed> (embed)
1639            - typo3-src <unfixed> (fork)
1640            NOTE: file refers to drupal, maybe there's a copy somewhere there
1641            NOTE: a copyright owner search didn't match anything
1642            - libauthen-passphrase-perl <unfixable> (fork)
1643            NOTE: perl implementation of phpass
1644    
1645    squirrelmail
1646            - wordpress <unfixed> (embed)
1647            NOTE: class-pop3.php
1648    
1649    ezSQL (http://www.woyano.com/jv/ezsql)
1650            - wordpress <unfixable> (fork)
1651            NOTE: wp-db.php
1652    
1653    Diff.php (Clay Loveless' version/killersoft.com)
1654            - php-versioncontrol-svn <unfixed>
1655    
1656    libm
1657            - spring <unfixed> (embed)
1658            NOTE: embedded by embedded copy of streflop
1659    
1660    streflop
1661            - spring <unfixed> (embed)
1662    
1663    minizip
1664            - spring <unfixed> (embed)
1665    
1666    oscpack
1667            - spring <unfixed> (embed)
1668    
1669    hpiutil2
1670            - spring <unfixed> (embed)
1671    
1672    p7zip
1673            - spring <unfixed> (embed)
Legend:
Removed from v.12694  
changed lines
  Added in v.13722
  ViewVC Help
Powered by ViewVC 1.1.5