/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 4891 by neilm, Sat Oct 28 11:05:37 2006 UTC revision 13204 by gilbert-guest, Thu Nov 5 03:20:29 2009 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (will be replaced by evince in Gnome 2.12)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (current poppler source package has a ported version, pinged maintainer)  to be applied in multiple source packages.
7  kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice (upstream is working on using poppler, probably not in time for Etch)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embedding a copy of the library into another source package)
19          fork (the package is not just embedding code but it is a fork and
20                thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24    The srcpkg might be some string to identify the code if there is no
25    specific source package.
26    
27    Everything up to the next line is ignored.
28    ---BEGIN
29    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30            NOTE: Fixed packages link to poppler library unless otherwise noted
31            - pdftohtml <unknown>
32            [sarge] - pdftohtml <unfixed>
33            [etch] - pdftohtml <unfixed>
34            NOTE: has been replaced by poppler-utils
35            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36            - texlive-base 3.0-12 (embed)
37            - texlive-bin 2007-1 (embed)
38            NOTE: links to poppler
39            - koffice <unfixed> (embed; bug #436163)
40            - libextractor 0.5.12-1 (embed)
41            NOTE: libextractor is using its own pdf decoder now
42            - ipe <unfixed> (embed)
43            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44            - ruby-gnome2 <unknown> (embed)
45            NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50    ppmd
51            - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59    
60    peercast
61            - gnome-peercast <removed> (embed)
62            [etch] - gnome-peercast <unfixed> (embed)
63    
64    silc-toolkit
65            - silc-client 1.1~beta6-1 (embed)
66    
67    icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71    dietlibc
72            - ccontrol 0.9.1+20071204-1 (static)
73    
74    libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78    libiax
79            - iaxmodem <unfixable> (embed; bug #548885)
80    
81    spandsp
82            - iaxmodem <unfixable> (embed; bug #548885)
83    
84    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85            - dpkg <unfixed> (embed)
86            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
87            - rsync <unfixed> (embed)
88            NOTE: somehow derived code base
89            - mono <unfixed> (embed)
90            TODO: check mozilla
91            - Linux kernels <unfixed> (embed)
92            - pvpgn 1.7.8-2 (embed)
93            - mrtg 2.12.2-1 (embed)
94            - rpm <unknown> (embed)
95            NOTE: pinged anibal since when rpm was fixed
96            - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98            - tra <unfixed>
99            - sash <unfixed>
100            - nsis <unfixed>
101            - mseide-msegui <unfixed>
102            NOTE: mseide
103            - mirrordir <unfixed>
104            - poco <unfixed>
105            - klibc <unfixed>
106            - ghostscript <unfixed>
107            - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112            - perl <unfixed>
113            - paraview <unfixed>
114            - gcvs <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125            - gamera 3.2.3-1 (embed)
126            - python2.4 <unfixed> (embed; bug #553403)
127            - python2.5 <unfixed> (embed; bug #553403)
128    
129    dulwich
130            - hg-git 0.1.0-1 (embed; bug #541996)
131    
132    libvigraimpex
133            - hugin <unfixed> (embed; bug #542259)
134            - enblend-enfuse <unfixed> (embed; bug #542258)
135            - gamera 3.2.3-1 (embed)
136    
137    libbz2
138            - dpkg <unfixed> (static)
139    
140    libgadu
141            - centericq <unfixed> (embed)
142            - pidgin <unfixed> (embed)
143            NOTE: pidgin links dynamically against libgadu; that should be fixed, then???
144            - kdenetwork 4:3.3.2-5 (embed)
145            NOTE: from kdenetwork: kopete
146            - ekg 1:1.8~rc0-1 (embed)
147            - kadu 0.6.0.2-3 (embed; bug #504430)
148            - gadu <itp> (embed)
149    
150    xmlrpc (which package is the "origin" of this code?)
151            - drupal <unfixed> (embed)
152            - phpgroupware <unfixed> (embed)
153            - egroupware <unfixed> (embed)
154            - phpwiki <unfixed> (embed)
155            - php4 <unfixed> (embed)
156            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157    
158    shtool (affects build-time only)
159            - mysql-ocaml <unfixed> (embed)
160            - php4 <unfixed> (embed)
161    
162    iceape
163            - iceweasel <unfixed> (fork)
164            - icedove <unfixed> (fork)
165            - xulrunner <unfixed> (fork)
166            - kompozer <unfixed> (embed; bug #532168)
167    
168    xli
169            - xloadimage <unfixed> (embed)
170    
171    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
172            - openmotif <unfixed> (embed)
173            - libxpm <unfixed> (embed)
174    
175    kerberized apps with BSD origin
176            - krb4 <removed> (embed)
177            - krb5 <unfixed> (embed)
178            - heimdal <unfixed> (embed)
179    
180    grip (which pkg is the origin?)
181            - libcdaudio <unfixed>
182            - grip <unfixed>
183            - gnome-vfs <unfixed>
184            TODO: check vfs2 as well
185    
186    fudforum
187            [etch] - phpgroupware <unfixed> (embed)
188            NOTE: phpgroupware-fudforum
189            [sarge] - egroupware-fudforum <removed> (embed)
190    
191    libbsd
192            - rdate 1:1.2-3 (embed)
193            - atheme-services <unfixed>
194            - libbsd-arc4random-perl <unfixed>
195            - isakmpd <unfixed>
196    
197    cvs
198            - gcvs <unfixed> (embed)
199            NOTE: see cvsunix/src in tarball
200    
201    pcre3
202            - php4 <unknown> (embed)
203            - analog 2:5.23-0woody1 (embed)
204            - goffice <unfixed> (embed)
205            NOTE: libgoffice-*
206            - vfu 4.06-4.1 (embed; bug #450754)
207            - tf5 5.0beta7-1 (embed)
208            - monotone 0.43-1 (embed)
209            NOTE: this only affects versions >= 0.37
210            - glib2.0 2.15.2-1 (embed)
211            - apache2 2.0.53-4 (embed)
212            - exim4 4.10-0.srh20.12 (embed)
213            - yacas <unfixed> (embed)
214            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
215            - gtamsanalyzer.app 0.42-5 (embed)
216            - tin <unknown> (embed)
217            - kazehakase 0.5.2-1
218            - webkit 1.0.1-1 (embed)
219            - qt4-x11 <unfixed> (embed)
220            NOTE: embedded via webkit copy
221            - erlang <unfixed> (embed)
222    
223    tiff
224            - wxwindows2.4 2.2.1 (embed)
225            - gamera 3.2.3-1 (embed)
226    
227    uudeview
228            - libconvert-uulib-perl <unfixed> (embed)
229            - pan <unfixed> (embed)
230    
231    sqlite (not affected by security vulnerabilities so far)
232            - amarok <unfixed> (embed)
233            - monotone 0.43-1 (embed)
234            - iceweasel <unfixed> (embed)
235    
236    util-linux/mount
237            - loop-aes-utils <unfixed> (embed)
238            NOTE: contains code from util-linux' mount in the mount-aes-udeb
239    
240    sylpheed
241            - sylpheed-claws <unfixed> (fork)
242    
243    phpsysinfo
244            - egroupware <unfixed> (embed)
245            - phpgroupware <unfixed> (embed)
246    
247    phpldapadmin
248            [sarge] - egroupware <unfixed> (embed)
249            NOTE: removed from egroupware after sarge
250    
251    chmlib
252            - kchmviewer <unknown> (embed)
253    
254    ffmpeg (libavcodec/libavformat)
255            - mplayer 1.0~rc2-14 (embed; bug #395252)
256            - kino 1.0.0-1
257            - vlc <not-affected> (Links dynamically since initial release)
258            - smilutils 0.3.0-10
259            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
260            - motion 3.1.19-1
261            - gstreamer0.10-ffmpeg 0.10.3-2
262            - xmovie <removed> (static)
263            TODO: gimp-gap (potentially using ffmpeg code as well)
264            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
265    
266    faad2
267            - mplayer 1.0~rc2-20 (embed)
268            - avifile <unfixed> (embed; bug #538750)
269    
270    libmad (MPEG decoding lib)
271            - xine-lib <unfixed> (embed)
272            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
273            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
274    
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
275  libdts  libdts
276  xine-lib          - xine-lib <unfixed> (embed)
277    
 flac:  
278  flac  flac
279  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
280    
281  imagemagick:  liba52
282  graphicsmagick          - a52dec <unfixed> (embed)
283            - xine-lib <unfixed> (embed)
284    
285    libmpeg2
286            - mpeg2dec <unfixed> (embed)
287            - xine-lib <unfixed> (embed)
288    
289    libntlm
290            - wget <unfixed> (fork; bug #550436)
291            - curl <unfixed> (fork; bug #550437)
292            - cntlm <unfixed> (fork; bug #550438)
293    
294    uw-imap
295            - pine <unfixed> (embed)
296            - alpine <unfixed> (embed)
297    
298    imagemagick
299            - graphicsmagick <unfixed> (fork)
300    
301    python-urlgrabber
302            - mercurial <unfixed> (embed; bug #531062)
303            - w3af <unfixed> (embed)
304            [experimental] - harvestman <unfixed> (embed)
305    
306    beautifulsoup
307            - python-mechanize <unfixed> (embed)
308            - zope2.11 <unfixed> (embed)
309            - twill <unknown> (embed)
310    
311    halibut
312            - nsis <unfixed> (fork)
313    
314    libghttp
315            - hotway <unfixed> (embed)
316    
317    libsndfile
318            - ardour 1:2.7.1-1 (embed)
319    
320    glibmm2.4
321            - ardour 1:2.7.1-1 (embed)
322    
323    libgnomecanvasmm2.6
324            - ardour 1:2.7.1-1 (embed)
325    
326    libsigc++-2.0
327            - ardour 1:2.7.1-1 (embed)
328    
329    soundtouch
330            - ardour 1:2.7.1-1 (embed)
331    
332    libmms
333            - xine-lib <unfixed> (embed)
334            - mimms <unfixed> (embed)
335    
336    fckeditor
337            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
338            - moin 1.8.2-2 (embed; bug #452599)
339            - karrigell <removed> (embed; bug #452598)
340            - gforge 4.6.99+svn6225-1 (embed)
341            - request-tracker3.8 <unfixed> (embed)
342    
343    ipatlas (not packaged in Debian)
344            - moodle <unfixed> (embed; bug #507185)
345    
346    libphp-phpmailer
347            - moodle <unfixed> (embed; bug #507185)
348            - mahara <unfixed> (embed)
349            - symfony <unfixed> (embed)
350            [etch] - phpgroupware <unfixed> (embed)
351            NOTE: phpgroupware-felamimail is only in etch
352            - egroupware <unfixed> (embed; bug #504283)
353            - glpi <unfixed>
354    
355    htmlArea (not packaged in Debian)
356            - moodle <unfixed> (embed)
357    
358    giflib
359            - wine <unfixed> (embed; bug #466181)
360    
361    bennu (not packaged in Debian, http://bennu.sourceforge.net)
362            - moodle <unfixed> (embed)
363    
364    smarty
365            - moodle 1.8.2-2 (embed; bug #471158)
366            - gallery2 2.2.5-2 (embed; bug #471160)
367            - mahara 0.9.2-2 (embed; bug #471201)
368            - gosa 2.4beta1-1 (embed; bug #471200)
369    
370  halibut:  TinyMCE
371  nsis          - wordpress 2.5.1-3 (embed; bug #478257)
372            - moodle <unfixed> (embed; bug #507185)
373  libghttp:          - knowledgeroot <unfixed> (embed)
374  hotway          - joomla <itp> (bug #326398)
375    
376    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
377            - scite <unfixed> (embed)
378            - qscintilla <unfixed> (embed)
379            - qscintilla2 <unfixed> (embed)
380            - geany <unfixed> (fork)
381            - anjuta <unfixed> (embed)
382    
383    libphp-adodb
384            - moodle <unfixed> (embed; bug #507185)
385            NOTE: also AdoDB-XML Schema
386            - gallery2 <unfixed> (embed)
387            - phppgadmin <unfixed> (embed)
388            - egroupware <unfixed> (embed)
389            - phpwiki <unfixed> (embed)
390            - torrentflux 2.0beta1-2 (embed)
391            - ipplan <unfixed> (embed)
392            - typo3-src <unfixed> (embed)
393            - cacti <unknown> (embed)
394            [sarge] - cacti <unfixed> (embed)
395            NOTE: dependency exists, but internal version is used
396            - gforge 4.7~rc2-6 (embed)
397            - mahara <unfixed> (embed)
398    
399    gzip
400            - linux-kernel <unfixed> (embed)
401            NOTE: lib/inflate.c
402            - klibc <unfixed> (embed)
403            NOTE: based on linux-kernel gzip code
404            - busybox <unfixed> (embed)
405    
406    neon
407            - cadaver 0.22.3+debian-1 (embed; bug #188381)
408            - gnome-vfs2 <unfixed> (embed; bug #395874)
409            [etch] - litmus <unfixed> (embed; #395875)
410            - litmus <removed> (embed; #395875)
411            [sarge] - screem <unfixed> (embed)
412            - sitecopy 1:0.16.3-5 (embed; bug #395876)
413            [etch] - tla <unfixed> (embed; bug #395877)
414            [sarge] - tla <unfixed> (embed; bug #395877)
415    
416    libmodplug
417            - gst-plugins-bad0.10 <unfixed> (embed)
418    
419    libvncserver
420            - vino <unfixed> (embed)
421    
422    putty
423            - filezilla <unfixed> (embed)
424    
425    tinyxml (not packaged in Debian)
426            - filezilla <unfixed>
427    
428    gv
429            - evince <unfixed> (embed)
430            NOTE: ps/ tree from gv 3.5.8
431            NOTE: evince-gtk is affected (a component of evince source package)
432    
433    libXbae
434            - paw <removed> (embed)
435            [etch] - paw <unfixed> (embed)
436    
437    libgtkhtml
438            - claws-mail-extra-plugins <unfixed> (fork)
439    
440    libXaw
441            - paw <removed> (embed)
442            [etch] - paw <unfixed> (embed)
443            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
444    
445    libgd2
446            - graphviz <unfixed> (embed)
447            NOTE: lib/gd seems to be 2.0.33
448            - wml <unfixed> (embed)
449            - libwmf <unfixed> (embed)
450            NOTE: derived from gd 1.6.3
451    
452    rar
453            - unrar-nonfree <unfixed> (embed)
454    
455    unrar-free (maybe this code is derived from the original rar, too?)
456            - clamav <unfixed> (embed)
457            NOTE: seems to be disabled in default config
458    
459    mplayer (DirectMedia Object loader)
460            - xine-lib <unfixed> (embed)
461            NOTE: src/libw32dll/
462            - vlc <unfixed> (embed)
463            NOTE: modules/codec/dmo/
464            - mplayer 1.0~rc2-20 (embed)
465    
466    libwpd (WordPerfect converter)
467            - openoffice.org <unfixed> (embed)
468    
469    fsplib (http://sourceforge.net/projects/fsp/)
470            - gftp <unfixed> (embed)
471            NOTE: lib/fsplib version 0.3
472    
473    sprng
474            - tree-puzzle <unfixed> (embed)
475    
476    librpcsecgss
477            - krb5 <unfixed> (embed)
478    
479    jasper
480            - ghostscript <unfixed> (embed)
481            - gs-gpl <unfixed> (embed)
482    
483    libiris
484            - psi <unfixed> (embed)
485            - kdenetwork <unfixed> (embed)
486            NOTE: kopete embeds libiris but links dynamically to libidn
487            - kdegames <unfixed> (embed)
488            NOTE: ksirk/kde4
489    
490    libidn
491            - monotone 0.43-1 (embed)
492            - psi <unfixed> (embed)
493            NOTE: psi embeds libiris which embeds libidn
494            - kdegames <unfixed> (embed)
495            NOTE: kdegames/kde4 embeds libiris which embeds libidn
496    
497    liblua
498            - monotone 0.43-1 (embed)
499            - nmap 5.00-1 (embed; bug #527997)
500            [lenny] - nmap <unfixed> (embed; bug #527997)
501    
502    libbotan
503            - monotone 0.43-1 (embed)
504    
505    NetXX
506            - monotone 0.43-1 (embed)
507    
508    libgc
509            - mono <unfixed> (embed)
510    
511    lzma
512            - p7zip <unfixed> (embed)
513            - xz-utils <unfixed> (fork)
514    
515    lzo
516            - grub2 <unfixed> (embed)
517    
518    yassl
519            - mysql-dfsg-5.0 <unfixed> (embed)
520    
521    pax code
522            - tar <unfixed> (embed)
523            - cpio <unfixed> (embed)
524    
525    t1lib
526            - tetex-bin 2.0.2-1 (embed)
527            - texlive-bin <unknown> (embed)
528    
529    guichan
530            - boswars <unfixed> (embed)
531            NOTE: maintainer notified us, working on it
532    
533    tolua
534            - boswars <unfixed> (embed)
535            NOTE: maintainer notified us, working on it
536    
537  etl-dev (will be renamed to libetl-dev soon):  asio-dev
538  synfig          - luxrender <removed> (embed)
539    
 libmms:  
540  xine-lib  xine-lib
541  mimms          - vlc <unfixed> (embed)
542            NOTE: only parts included in modules/access/rtsp
 FCKeditor:  
 knowledgeroot  
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
   
543    
544  TinyMCE:  netpbm
545  wordpress          - tcl8.3 <unfixed> (embed)
546  moodle          - tcl8.4 <unfixed> (embed)
547  knowledgeroot          - tcl8.5 <unfixed> (embed)
548  joomla (ITP)          NOTE: generic/tkImgGIF.c
549    
550  scintilla:  tk8.5
551  scite          - tk8.0 <removed> (old-version)
552  qscintilla          - tk8.3 <unfixed> (old-version)
553  geany          - tk8.4 <unfixed> (old-version)
554            - perl-tk <unfixable> (fork)
555  libphp-adodb:  
556  gallery2  samba
557  phppgadmin          - mc 2:4.6.2~git20080311-1 (embed)
558  egroupware          NOTE: maintainer is aware of this, currently searching a solution
559  phpwiki  
560  moodle  plib1.8.4c2
561  cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)          - boson <unfixed> (fork)
562            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
563  gzip:  
564  linux-kernel (lib/inflate.c)  fribidi
565  klibc (based on linux-kernel gzip code)          - quesoglc <unfixed> (embed)
566  busybox          NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
567    
568  ffmpeg:  glew
569  mplayer (#395252)          - quesoglc <unfixed> (embed; bug #489341)
570            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
571  neon:  
572  cadaver (all, but being worked on: #188381)  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
573  gnome-vfs2 (#395874)          - transcend <unfixed> (embed)
574  litmus (#395875)          - cultivation <unfixed> (embed)
575  screem (sarge only)          - passage <unfixed> (embed)
576  sitecopy (#395876)          - gravitation <unfixed> (embed)
577  tla (etch/sid only: #395877)  
578    tar
579            - libarchive <unfixed> (embed)
580            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
581    
582    cpio
583            - libarchive <unfixed> (embed)
584            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
585    
586    webkit
587            - qt4-x11 <unfixed> (embed)
588    
589    ftgl
590            - blender 2.46+dfsg-1 (embed)
591    
592    wv
593            - abiword <unfixed>
594    
595    qemu
596            - kvm <unfixed> (embed; bug #543159)
597            - xen-3 <unfixed> (embed)
598            - xen-unstable <unfixed> (embed)
599    
600    vgabios
601            - kvm <unfixed> (embed; bug #489442)
602    
603    bochs
604            - kvm <unfixed> (embed; bug #489442)
605    
606    speex
607            - vorbis-tools <unfixed> (embed)
608            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
609            - gst-plugins-good0.10 <unfixed> (embed)
610            - xine-lib <unfixed> (embed)
611            - libfishsound <unfixed> (embed)
612            - libannodex <unfixed> (embed)
613            - vlc <unfixed> (embed)
614            - xmms-speex <unfixed> (embed)
615            - libsdl-sound1.2 <unfixed> (embed)
616            - sweep <unfixed> (embed)
617    
618    libreadline
619            - magic <itp> (old-version)
620    
621    opcode
622            - ode <unfixed> (embed)
623            NOTE: opcode is not a package in debian, it is just embedded
624            NOTE: http://www.codercorner.com/Opcode.htm
625    
626    gimpact
627            - ode <unfixed> (embed)
628            NOTE: gimpact is not a package in debian, it is just embedded
629            NOTE: http://gimpact.sf.net
630    
631    mochikit
632            - mahara <unfixed> (embed)
633            NOTE: they require extra patches, still unmerged upstream
634            - ntop <unfixed> (embed)
635            - coherence 0.6.2-1 (embed)
636            - paste <unfixed> (embed)
637            - turbogears <unfixed> (embed)
638            - plone3 <unfixed> (embed)
639            - xulrunner <unfixed> (embed)
640            - libjift-plugin-chart-perl <unfixed> (embed)
641            - sabnzbdplus <unfixed> (embed)
642            - tgmochikit <unfixed> (embed)
643    
644    prototypejs
645            - netbeans-ide 6.0.1+dfsg-2 (embed)
646            - auth2db <unfixed> (embed)
647            - webcit <unfixed> (embed)
648            - asterisk 1:1.6.2.0~rc3-1 (embed)
649            - doc-iana <unfixed> (embed)
650            - libaws <unfixed> (embed)
651            - libjson-ruby <unfixed> (embed)
652            - lucene2 <unfixed> (embed)
653            - solr <unfixed> (embed)
654            - glpi <unfixed> (embed)
655            - mnemo2 <unfixed> (embed)
656            - nag2 <unfixed> (embed)
657            - knowledgeroot <unfixed> (embed)
658            - mediatomb <unfixed> (embed)
659            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
660            - op-panel <unfixed> (embed)
661            - ebug-http <unfixed> (embed)
662            - phpgedview <removed> (embed)
663            - poker-network <unfixed> (embed)
664            - webhelpers <unfixed> (embed)
665            - qwik <unfixed> (embed)
666            - rails 2.1.0-6 (embed)
667            - typo3-src <unfixed> (embed)
668            - wordpress 2.5.0-2 (embed)
669            - zope <unfixed> (embed)
670            - smokeping 2.3.6-3 (embed)
671            - ampache 3.4.1-2 (embed)
672            - exaile <unfixed> (embed)
673            - hobix <unfixed> (embed)
674            - pixelpost <unfixed> (embed)
675            - symfony <unfixed> (embed)
676            NOTE: it's been said that there are custom changes
677            - zabbix <unfixed> (embed)
678            - turba2 <unfixed> (embed)
679            - chora2 <unfixed> (embed)
680            - gollem <unfixed> (embed)
681            - jscropperui <unfixed> (embed)
682            - rt-extension-emailcompletion <unfixed> (embed)
683            - scriptaculous <unfixed> (embed)
684            - ingo1 <unfixed> (embed)
685            - kronolith2 <unfixed> (embed)
686            - libpdfbox-java <unfixed> (embed)
687            - activeldap <unfixed> (embed)
688            - libfontbox-java <unfixed> (embed)
689            - libjempbox-java <unfixed> (embed)
690            - libv8 <unfixed> (embed)
691            - mantis <unfixed> (embed)
692            - otrs2 <unfixed> (embed)
693            - webcalendar <unfixed> (embed)
694            - webhelpers <unfixed> (embed)
695            - redmine <unfixed> (embed)
696            - jifty <unfixed> (embed)
697            - jquery <unfixed> (embed)
698            - passenger <unfixed> (embed)
699            - plone3 <unfixed> (embed)
700            - pylucene <unfixed> (embed)
701            - request-tracker3.6 <unfixed> (embed)
702            - request-tracker3.8 <unfixed> (embed)
703            - wesnoth <unfixed> (embed)
704            - xulrunner <unfixed> (embed)
705            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
706    
707    gdb
708            - insight <unfixed> (embed)
709    
710    e2fsprogs
711            - ldiskfsprogs <unfixable> (fork)
712    
713    quazip (not packaged in Debian)
714            - qcake <unfixed> (embed)
715            NOTE: starting with upstream version 0.6.4
716    
717    exo
718            - pcmanfm <unfixed> (embed; bug #499677)
719            NOTE: slightly modified source code
720    
721    java
722            - openjdk-6 <unfixed>
723            - sun-java5 <unfixed>
724            - sun-java6 <unfixed>
725    
726    libphp-snoopy
727            - ampache 3.4.1-2 (embed; bug #504169)
728            - mahara 1.0.5-2 (embed; bug #504170)
729            - pixelpost 1.7.1-5 (embed; bug #504171)
730            - mediamate 0.9.3.6-5 (embed; bug #504172)
731            - opendb <removed> (embed; bug #504173)
732            [etch] - opendb <unfixed> (embed; bug #504173)
733            - wordpress 2.5.1-9 (embed; bug #443948)
734            - moodle <unfixed> (embed; bug #507185)
735            [etch] - phpgroupware <unfixed> (embed)
736            NOTE: phpgroupware-felamimail
737            - magpierss 0.72-3 (embed; bug #431089)
738    
739    jquery
740            - zekr <unfixed> (embed)
741            - wordpress <unknown> (embed)
742            - yocto-reader <unfixed> (embed)
743            - textpattern <unfixed> (embed)
744            - genshi 0.5.1-1 (embed)
745            NOTE: compressed file under examples/ dir
746            - prewikka <unfixed> (embed)
747            - libramaze-ruby <unfixed> (embed)
748            - drupal5 <unfixed> (embed)
749            - b2evolution <unfixed> (embed)
750            - wesnoth <unfixed> (embed)
751    
752    tablesorter (jquery plugin, not packaged yet)
753            - wesnoth <unfixed> (embed)
754    
755    kses
756            - wordpress <unfixed> (embed; bug #504242)
757            NOTE: their copy has all methods renamed to wp_<foo>
758            NOTE: kses isn't in Debian, RFP: #504240
759            - moodle <unfixed> (embed; bug #507185)
760            - egroupware <unfixed> (embed)
761    
762    magpierss
763            - wordpress <unfixed> (embed; bug #504242)
764            - moodle <unfixed>
765    
766    php-gettext
767            - wordpress 2.8.4-1 (embed; bug #504242)
768    
769    libphp-ixr (name may change, it is the Incutio XML-RPC)
770            - wordpress <unfixed> (embed; bug #504242)
771            NOTE: libphp-ixr isn't in Debian, RFP: #504236
772            - dokuwiki <unfixed> (embed)
773            - textpattern <unfixed> (embed)
774    
775    libphp-cas
776            - glpi <unfixed> (embed)
777            - moodle <unfixed> (embed; bug #505984)
778    
779    scriptaculous
780            - glpi <unfixed> (embed)
781            - libaws <unfixed> (embed)
782            NOTE: libaws-doc
783            - op-panel <unfixed> (embed)
784            - symfony <unfixed> (embed)
785            NOTE: maintainer says there are extra incompatible changes required
786            - pixelpost <unfixed> (embed)
787            - webhelpers <unfixed> (embed)
788            NOTE: python-webhelpers
789            - qwik <unfixed> (embed)
790            - smokeping <unfixed> (embed)
791            - turba2 <unfixed> (embed)
792            - typo3-src 4.2.3-1 (embed)
793            - request-tracker3.6 <unfixed> (embed)
794            - request-tracker3.8 <unfixed> (embed)
795    
796    libmarkdown-php
797            - moodle <unfixed> (embed; bug #507185)
798            - pixelpost <unfixed> (embed)
799    
800    php-openid
801            - wordpress-openid <itp> (embed)
802    
803    geshi
804            - dokuwiki 0.0.20080505-3.1 (embed)
805            - pgfouine 1.0-1.1 (embed)
806            - websvn 2.1.0-1 (embed)
807    
808    webcalendar
809            - gforge 4.7~rc2-6 (embed; bug #504758)
810    
811    libical
812            - kdepim <unfixed> (fork)
813            - kdepimlibs <unfixed> (fork)
814            NOTE: fixed in KDE4 post 4.1.x series
815            - claws-mail-extra-plugins <unfixed> (fork)
816    
817    libltdl3
818            - kdelibs <unfixed> (embed)
819            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
820            - synfig <unfixed> (embed)
821    
822    harfbuzz
823            - qt4-x11 <unfixed> (embed)
824    
825    libzip
826            - php5 <unfixed> (fork)
827            - odt2txt <unfixed> (embed; bug #523808)
828    
829    json.php (not packaged; should be replaced with php's built-in functions)
830            - moodle <unfixed>
831            - yui <unfixed>
832            - gallery2 <unfixed>
833            - dokuwiki <unfixed>
834            - typo3-src <unfixed>
835    
836    php-fpdf
837            - tcpdf <itp> (fork)
838            - moodle <unfixed>
839            - phpwiki <unfixed>
840            - egroupware <unfixed>
841            - ldap-account-manager <unfixed> (fork)
842    
843    tcpdf (itp: #495985)
844            - moodle <unfixed>
845            - phpmyadmin <unfixed>
846    
847    typo3
848            - moodle <unfixed>
849    
850    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
851            - moodle <unfixed>
852            - gosa <unfixed>
853    
854    php-ole (itp: #487558)
855            - moodle <unfixed>
856    
857    pieforms (http://www.catalyst.net.nz)
858            - mahara <unfixed>
859    
860    savant2 (http://phpsavant.com)
861            - egroupware <unfixed>
862    
863    rssparser (http://nwow.org)
864            - egroupware <unfixed>
865            - phpgroupware <unfixed>
866    
867    lcms
868            - openjdk-6 <unfixed> (fork)
869    
870    libphp-phplayersmenu
871            - diogenes <unfixed>
872            - phpldapadmin <unfixed>
873    
874    libphp-pclzip
875            - docvert <unfixed>
876            - moodle <unfixed>
877            - egroupware <unfixed>
878    
879    libphp-simplepie
880            - dokuwiki <unfixed>
881    
882    libphp-jpgraph
883            - egroupware <unfixed>
884    
885    php-simpletest
886            - moodle <unfixed>
887    
888    libpng
889            - iceweasel <not-affected> (uses xulrunner)
890            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
891            - iceape 1.0.13~pre080614i-0etch1 (embed)
892            - xulrunner 1.9.0.13-1 (embed)
893            [lenny] - xulrunner 1.9.0.11-0lenny1
894            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
895            - gamera 3.2.3-1 (embed)
896    
897    irssi
898            - silc-client <unfixed> (embed)
899            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
900    
901    extc
902            - mtasc <unfixed> (embed)
903            - haxe <unfixed> (embed)
904    
905    swflib
906            - mtasc <unfixed> (embed)
907            - haxe <unfixed> (embed)
908    
909    libitext-java
910            - bouncycastle 2.1.4-1 (embed)
911    
912    python-ply
913            - pyke <unfixed> (embed)
914    
915    libdumbnet (libdnet upstream)
916            - nmap <unfixed> (fork)
917    
918    gcc-4.4
919            - gcc-mingw32 <unfixed> (embed)
920    
921    camlimages
922            - advi <unfixed> (static; bug #550441)
923    
924    memcached
925            - memcachedb <unfixed> (embed)
926    
927    yajl
928            - argyll <unfixed> (embed; bug #544223)
929            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
930    
931    libept
932            - adept <unfixed> (embed; bug #540649)
933    
934    libvorbis
935            - iceweasel <not-affected> (uses xulrunner)
936            - xulrunner <unfixed> (embed; bug #540949)
937            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
938            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
939    
940    cairo
941            - iceweasel <not-affected> (uses xulrunner)
942            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
943    
944    liboggz
945            - iceweasel <not-affected> (uses xulrunner)
946            - xulrunner <unfixed> (embed; bug #540949)
947            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
948            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
949    
950    
951    liboggplay
952            - iceweasel <not-affected> (uses xulrunner)
953            - xulrunner <unfixed> (embed; bug #540949)
954            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
955            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
956    
957    php-net-dnsbl
958            - serendipity <unfixed> (embed)
959    
960    php-onyx-rss
961            - serendipity <unfixed> (embed)
962    
963    php-text-wiki
964            - serendipity <unfixed> (embed)
965    
966    php-xml-rpc
967            - serendipity <unfixed> (embed)
968    
969    polarssl (does not have a shared library)
970            - pdkim <itp> (embed; bug #543150)
971            - xyssl <unfixed> (old-version)
972    
973    pidgin
974            - gaim <removed> (old-version)
975    
976    icu
977            - webkit 1.0.1-1 (embed; bug #547214)
978            - texlive-bin <unfixed> (fork)
979            NOTE: texlive upstream working with icu upstream to merge their changes
980    
981    cyrus-imapd-2.2
982            - kolab-cyrus-imapd <unfixed> (fork)
983            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
984    
985    python-cxx-dev
986            - freecad <unfixed> (embed; bug #547936)
987    
988    libzipios++-dev
989            - freecad <unfixed> (embed; bug #547941)
990    
991    linux-2.6
992            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
993            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
994            - kernel-source-2.6.8 <removed> (old-version)
995            - kernel-source-2.4.27 <removed> (old-version)
996            - kernel-source-2.4.24 <removed> (old-version)
997            - kernel-source-2.2.25 <removed> (old-version)
998            - kernel-source-2.2.20 <removed> (old-version)
999    
1000    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1001            - kvm <unfixed> (embed) [./libfdt/*]
1002    
1003    qweb (not packaged)
1004            - ajaxterm <unfixed>
1005    
1006    opensaml2
1007            - opensaml <removed> (old-version)
1008    
1009    shibboleth-sp2
1010            - shibboleth-sp <removed> (old-version)
1011    
1012    tuxonice-userui
1013            - suspend2-userui <removed> (old-version)
1014    
1015    expat
1016            - w3c-libwww <removed> (embed; bug #551941)
1017            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1018            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1019            - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1020            - python2.4 <unfixed> (embed; bug #553403)
1021            - wxwindows2.4 <removed> (embed)
1022            - wxwidgets2.6 <unfixed> (embed)
1023            - wxwidgets2.8 <unfixed> (embed)
1024            - celementtree <unfixed> (embed)
1025            - audacity <unfixed> (embed)
1026            - matanza <unfixed> (embed)
1027            - tdom <unfixed> (embed)
1028            - udunits <unfixed> (embed)
1029            - apr-util 1.2 (embed)
1030            - ayttm <unfixed> (embed)
1031            - cableswig <unfixed> (embed)
1032            - cadaver <unfixed> (embed)
1033            - cmake <unfixed> (embed)
1034            - coin3 <unfixed> (embed)
1035            - gdcm <unfixed> (embed)
1036            - ghostscript <unfixed> (embed)
1037            - grmonitor <unfixed> (embed)
1038            - iceape <unfixed> (embed)
1039            - insighttoolkit <unfixed> (embed)
1040            - libparagui1.1 <unfixed> (embed)
1041            - paraview <unfixed> (embed)
1042            - poco <unfixed> (embed)
1043            - simgear <unfixed> (embed)
1044            - sitecopy <unfixed> (embed)
1045            - smart 1.0-1 (embed)
1046            [etch] - smart <unfixed> (embed)
1047            - swish-e <unfixed> (embed)
1048            - tla <unfixed> (embed)
1049            - vtk <unfixed> (embed)
1050            - wbxml2 <unfixed> (embed)
1051            - xmlrpc-c <unfixed> (embed)
1052            - iceweasel <unfixed> (embed)
1053            - kompozer <unfixed> (embed)
1054            - vxl <unfixed> (embed)
1055            - xulrunner <unfixed> (embed)
1056            - apache2 2.2 (embed)
1057            - texlive-bin <unfixed> (embed) [included twice]
1058            - vnc4 <unfixed> (embed)
1059            - xotcl <unfixed> (embed)
1060    
1061    xerces-c
1062            - xerces-c2 <unfixed> (old-version)
1063            - xerces27 <removed> (old-version)
1064    
1065    md5 (RSA's version; not the gnu version provided by coreutils)
1066            - w3c-libwww <removed> (embed; bug #551942)
1067            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1068    
1069    enet
1070            - sauerbraten <unfixed> (embed; #497194)
1071    
1072    eglibc
1073            - glibc <removed> (old-version)
1074    
1075    galib
1076            - gamera 3.2.3-1 (embed)
1077    
1078    configobj
1079            - bzr <unfixed> (embed)
1080            - elisa <unfixed> (embed)
1081            - gaupol <unfixed> (embed)
1082            - ipython <unfixed> (embed)
1083            - pida <unfixed> (embed)
1084            - psychopy <unfixed> (embed)
1085            - rest2web <unfixed> (embed)
1086            - auth2db <unknown> (embed)
1087            - dynagen <unknown> (embed)
1088            - iceweasel <unknown> (embed)
1089            - sabnzbdplus <unknown> (embed)
1090            - xulrunner <unknown> (embed)
1091            - nipy <not-affected> (embed) [./examples/neurospin/neurospy/configobj.py]
1092    
1093    python-clientform
1094            - bibus <unfixed> (embed)
1095            - zope2.10 <unfixed> (embed)
1096            - zope2.11 <unfixed> (embed)
1097            - python-mechanize <unknown> (embed)
1098            - twill <unknown> (embed)
1099    
1100    python-mechanize
1101            - zope2.10 <unfixed> (embed)
1102            - zope2.11 <unfixed> (embed)
1103            - twill <unknown> (embed)
1104    
1105    pexpect
1106            - duplicity <unfixed> (embed)
1107            - hplip <unfixed> (embed)
1108            - smart <unfixed> (embed)
1109    
1110    pyparsing
1111            - bauble <unfixed> (embed)
1112            - boa-constructor <unfixed> (embed)
1113            - calibre <unfixed> (embed)
1114            - matplotlib <unfixed> (embed)
1115            - zhpy <unfixed> (embed)
1116            - polybori <unknown> (embed)
1117            - python-whoosh <unknown> (embed)
1118            - twill <unknown> (embed)
1119            - zope-textindexng3 <unknown> (embed)
1120    
1121    python-pysqlite2
1122            - python2.4 <unfixed> (embed; bug #553403)
1123            - python2.5 <unfixed> (embed; bug #553403)
1124    
1125    celementtree
1126            - python2.5 <unfixed> (embed)
1127            - smart 1.0-1 (embed)
1128            [etch] - smart <unfixed> (embed)
1129    
1130    elementtree
1131            - python2.5 <unfixed> (embed)
1132            - bzr <unfixed> (embed)
1133            - gedit <unfixed> (embed)
1134            - smart 1.0-1 (embed)
1135            [etch] - smart <unfixed> (embed)
1136            - solfege <unfixed> (embed)
1137            - w3af <unfixed> (embed)
1138            - python-qt4 <unknown> (embed)
1139            - sphinx <unknown> (embed)
1140            - python-nltk <itp> (embed)
1141    
1142    python2.5
1143            - python2.4 <unfixed> (old-version)
1144            - jython <unfixed> (embed)
1145            NOTE: embeds many stdlib modules
1146            - python-django <unfixed> (embed)
1147            NOTE: emebeds stdlib modules: doctest, decimal
1148            - gamera 3.2.3-1 (embed)
1149            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1150            - boa-constructor <unfixed> (embed)
1151            NOTE: embeds stdlib modules: ConfigParser
1152            - nicotine <unfixed> (embed)
1153            NOTE: embeds stdlib modules: ConfigParser
1154            - museek+ <unfixed> (embed)
1155            NOTE: embeds stdlib modules: ConfigParser
1156            - vegastrike-data <unfixed> (embed)
1157            NOTE: embeds many stdlib modules
1158            - codespeak-lib <unfixed> (embed)
1159            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1160            - config-manager <unfixed> (embed)
1161            NOTE: embeds stdlib modules: optparse
1162            - jhbuild <unfixed> (embed)
1163            NOTE: embeds stdlib modules: optparse, subprocess
1164            - smart <unfixed> (embed)
1165            NOTE: embeds stdlib modules: optparse
1166            - pyprotocols <unfixed> (embed)
1167            NOTE: embeds stdlib modules: doctest
1168            - ruledispatch <unfixed> (embed)
1169            NOTE: embeds stdlib modules: doctest
1170            - distribute <unfixed> (embed)
1171            NOTE: embeds stdlib modules: doctest
1172            - python-setuptools <unfixed> (embed)
1173            NOTE: embeds stdlib modules: doctest
1174            - zope.testing <unfixed> (embed)
1175            NOTE: embeds stdlib modules: doctest
1176            - translate-toolkit <unfixed> (embed)
1177            NOTE: embeds stdlib modules: textwrap, contextlib
1178            - libtpclient-py <unfixed> (embed)
1179            NOTE: embeds stdlib modules: subprocess
1180            - grass <unfixed> (embed)
1181            NOTE: embeds stdlib modules: subprocess
1182            - coherence <unfixed> (embed)
1183            NOTE: embeds stdlib modules: uuid
1184            - python-django-extensions <unfixed> (embed)
1185            NOTE: embeds stdlib modules: uuid
1186            - setroubleshoot <unfixed> (embed)
1187            NOTE: embeds stdlib modules: uuid
1188            - linkchecker <unfixed> (embed)
1189            NOTE: embeds msgfmt.py script
1190            - imdbpy <unfixed> (embed)
1191            NOTE: embeds msgfmt.py script
1192            - kiwi <unfixed> (embed)
1193            NOTE: embeds msgfmt.py script
1194            - moin <unfixed> (embed)
1195            NOTE: embeds msgfmt.py script
1196            - plone3 <unfixed> (embed)
1197            NOTE: embeds msgfmt.py script
1198            - roundup <unfixed> (embed)
1199            NOTE: embeds msgfmt.py script
1200            - rednotebook <unfixed> (embed)
1201            NOTE: embeds msgfmt.py script
1202            - turbogears <unfixed> (embed)
1203            NOTE: embeds msgfmt.py script
1204            - elisa <unfixed> (embed)
1205            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1206            - calibre <unfixed> (embed)
1207            NOTE: embeds msgfmt.py script
1208            - mailman <unfixed> (embed)
1209            NOTE: embeds msgfmt.py script
1210            - python-docutils <unknown> (embed)
1211            NOTE: embeds stdlib modules: optparse, textwrap
1212            - python-imaging <unknown> (embed)
1213            NOTE: embeds stdlib modules: doctest
1214            - python-mechanize <unknown> (embed)
1215            NOTE: embeds stdlib modules: doctest
1216            - twill <unknown> (embed)
1217            NOTE: embeds stdlib modules: subprocess
1218            - zeroc-ice <unknown> (embed)
1219            NOTE: embeds stdlib modules: subprocess
1220            - wxwidgets2.8 <unknown> (embed)
1221            NOTE: embeds stdlib modules: subprocess
1222            - cycle <unknown> (embed)
1223            NOTE: embeds msgfmt.py script
1224            - deluge <unknown> (embed)
1225            NOTE: embeds msgfmt.py script
1226            - opendict <unknown> (embed)
1227            NOTE: embeds msgfmt.py script
1228            - openerp-client <unknown> (embed)
1229            NOTE: embeds msgfmt.py script
1230            - rapidsvn <unknown> (embed)
1231            NOTE: embeds msgfmt.py script
1232            - wammu <unknown> (embed)
1233            NOTE: embeds msgfmt.py script
1234            - gaphor <unknown> (embed)
1235            NOTE: embeds msgfmt.py script
1236            - pida <unknown> (embed)
1237            NOTE: embeds msgfmt.py script
1238            - python-formencode <unknown> (embed)
1239            NOTE: embeds msgfmt.py script
1240    
1241    argparse
1242            - twill <unfixed> (embed)
1243            - ipython <unfixed> (embed)
1244    
1245    coherence
1246            - elisa <unfixed> (embed)
1247    
1248    simpletal
1249            - plastex <unfixed> (embed)
1250    
1251    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1252            - postr <unfixed> (embed)
1253            - elisa <unfixed> (embed)
1254    
1255    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1256            - apertium-tolk <unfixed> (embed)
1257            - ipython <unfixed> (embed)
1258            - virtaal <unfixed> (embed)
1259    
1260    distribute
1261            - setuptools <removed> (old-version)
1262    
1263    rails
1264            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1265            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1266            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1267            - thin <unfixed> (embed) [./spec/rails_app/*]
1268            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1269            NOTE: be dangerous if developers are naively basing their code off of the examples
1270            NOTE: prototype.js is among the example files

Legend:
Removed from v.4891  
changed lines
  Added in v.13204

  ViewVC Help
Powered by ViewVC 1.1.5