/[secure-testing]/data/embedded-code-copies

Diff of /data/embedded-code-copies

Parent Directory | Revision Log | View Patch Patch

-revision 13420 by gilbert-guest,
Wed Dec  2 03:42:40 2009 UTC
+revision 13475 by gilbert-guest,
Mon Dec  7 03:28:13 2009 UTC
 Line 56 
 libevent
  lrmi
          - read-edid 2.0.0-1 (embed; bug #495131)
+         - s3switch <unfixed> (embed)
+         - xresprobe <unfixed> (embed)
+         - zhcon <unfixed> (embed)
  peercast
          - gnome-peercast <removed> (embed)
-Line 82 
 spandsp
+Line 85 
 spandsp
          - iaxmodem <unfixable> (embed; bug #548885)
  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
-         - dpkg <unfixed> (embed)
+         - dpkg <unfixed> (static)
          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
          - rsync <unfixed> (embed)
          NOTE: somehow derived code base
-Line 138 
 libbz2
+Line 141 
 libbz2
          - dpkg <unfixed> (static)
  libgadu
-         - centericq <unfixed> (embed)
+         - centerim <unfixed> (embed; bug #559783)
          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
          - kdenetwork 4:3.3.2-5 (embed)
-Line 197 
 libbsd
+Line 200 
 libbsd
          - atheme-services <unfixed>
          - libbsd-arc4random-perl <unfixed>
          - isakmpd <unfixed>
+         - bsdgames <unfixed> (embed)
+         - bsd-mailx <unfixed> (embed)
+         - netcat-openbsd <unfixed> (embed; bug #550611)
+         - openssh <unfixed> (embed)
+         - unworkable <unfixed> (embed)
  cvs
          - gcvs <unfixed> (embed)
-Line 236 
 sqlite (not affected by security vulnera
+Line 244 
 sqlite (not affected by security vulnera
          - amarok <unfixed> (embed)
          - monotone 0.43-1 (embed)
          - iceweasel <unfixed> (embed)
+         - heimdal <unfixed> (embed; bug #559616)
  util-linux/mount
          - loop-aes-utils <unfixed> (embed)
-Line 266 
 ffmpeg (libavcodec/libavformat)
+Line 275 
 ffmpeg (libavcodec/libavformat)
          - xmovie <removed> (static)
          TODO: gimp-gap (potentially using ffmpeg code as well)
          - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
+         - audacity 1.3.7-2 (embed; bug #512278)
  faad2
          - mplayer 1.0~rc2-20 (embed)
-Line 427 
 libvncserver
+Line 437 
 libvncserver
  putty
          - filezilla <unfixed> (embed)
- tinyxml (not packaged in Debian)
+ tinyxml (not packaged in Debian; itp bug #531968)
          - filezilla <unfixed>
+         - crystalspace <unfixed> (embed)
+         - libwfut <unfixed> (embed)
+         - rarian <unfixed> (embed)
+         - bulletml <unfixed> (embed)
+         - pokerth <unfixed> (embed)
+         - qutecom <unfixed> (embed)
+         - sofa-framework <unfixed> (embed)
+         - yate <unfixed> (embed)
+         - antigrav <unfixed> (embed)
+         - balder2d <unfixed> (embed)
+         - cal3d <unfixed> (embed)
+         - criticalmass <unfixed> (embed)
+         - ember <unfixed> (embed)
+         - epiphany <unfixed> (embed)
+         - gambit <unfixed> (embed)
+         - noiz2sa <unfixed> (embed)
+         - ogre <unfixed> (embed)
+         - opencity <unfixed> (embed)
+         - openmovieeditor <unfixed> (embed)
+         - pouetchess <unfixed> (embed)
+         - tecnoballz <unfixed> (embed)
+         - trigger-rally <unfixed> (embed)
+         - xmoto <unfixed> (embed)
+         - mapnik <unknown> (embed)
+         NOTE: uses a different XML parser by default
+         - rrootage 0.23a-6 <embed>
+         NOTE: links to libbulltetml
+         - boson <unknown> (embed)
+         NOTE: the embedded code is unused
  gv
          - evince <unfixed> (embed)
-Line 482 
 librpcsecgss
+Line 521 
 librpcsecgss
          - krb5 <unfixed> (embed)
  jasper
-         - ghostscript <unfixed> (embed)
+         - ghostscript 8.70~dfsg-2+b1 (embed)
-         - gs-gpl <unfixed> (embed)
+         - ghostscript <unfixed> (static)
  libiris
          - psi <unfixed> (embed)
-Line 576 
 fribidi
+Line 615 
 fribidi
  glew
          - quesoglc <unfixed> (embed; bug #489341)
          NOTE: waiting on GLEW_MX version of glew (see bug #474488)
+         - trigger <unfixed> (embed)
+         NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
+         - trigger-rally <unfixed> (embed)
+         NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
          - transcend <unfixed> (embed)
-Line 592 
 cpio
+Line 635 
 cpio
          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
  webkit
-         - qt4-x11 <unfixed> (embed)
+         - qt4-x11 <unfixed> (embed; bug #479851)
+         - kdelibs <unfixed> (old-version)
+         - kde4libs <unfixed> (fork)
  ftgl
          - blender 2.46+dfsg-1 (embed)
-Line 688 
 prototypejs
+Line 733 
 prototypejs
          - passenger 2.2.5debian1-1 (embed; bug #555273)
          - plone3 <unfixed> (embed; bug #555275)
          - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
-         - libhtml-prototype-perl <unfixed> (embed; bug #538920)
+         - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
          - xulrunner <unfixed> (embed)
          NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
-Line 781 
 scriptaculous (prototype.js is among the
+Line 826 
 scriptaculous (prototype.js is among the
          - request-tracker3.8 <unfixed> (embed)
          - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
          - wordpress 2.5.0-2 (embed)
+         - libhtml-prototype-perl 1.48-3 (embed)
  libmarkdown-php
          - moodle <unfixed> (embed; bug #507185)
-Line 903 
 python-ply
+Line 949 
 python-ply
          - pywbem <unfixed> (embed; bug #555364)
          - sepolgen <unfixed> (embed; bug #555365)
          - zope-textindexng3 <unknown> (embed)
-         - iceweasel <unknown> (embed)
+         - iceweasel <not-affected> (uses xulrunner)
          - xulrunner <unknown> (embed)
          - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
-Line 934 
 libvorbis
+Line 980 
 libvorbis
          - xulrunner <unfixed> (embed; bug #540959)
          [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
          [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed)
+         [etch] - iceape <not-affected> (introduced in 2.0)
+         [lenny] - iceape <not-affected> (introduced in 2.0)
  cairo
          - iceweasel <not-affected> (uses xulrunner)
-Line 941 
 cairo
+Line 990 
 cairo
  liboggz
          - iceweasel <not-affected> (uses xulrunner)
-         - xulrunner <unfixed> (embed; bug #540949)
+         - xulrunner <unfixed> (embed; bug #540959)
          [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
          [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed)
+         [etch] - iceape <not-affected> (introduced in 2.0)
+         [lenny] - iceape <not-affected> (introduced in 2.0)
  liboggplay
          - iceweasel <not-affected> (uses xulrunner)
-         - xulrunner <unfixed> (embed; bug #540949)
+         - xulrunner <unfixed> (embed; bug #540959)
          [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
          [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed)
+         [etch] - iceape <not-affected> (introduced in 2.0)
+         [lenny] - iceape <not-affected> (introduced in 2.0)
  php-net-dnsbl
          - serendipity <unfixed> (embed)
-Line 970 
 polarssl (does not have a shared library
+Line 1024 
 polarssl (does not have a shared library
  pidgin
          - gaim <removed> (old-version)
+         - qutecom <unfixed> (embed; bug #559785)
  icu
          - webkit 1.0.1-1 (embed; bug #547214)
-Line 1020 
 expat
+Line 1075 
 expat
          - wxwidgets2.6 <unfixed> (embed)
          - wxwidgets2.8 <unfixed> (embed)
          - celementtree <unfixed> (embed)
-         - audacity <unfixed> (embed)
+         - audacity 1.3.2-1 (embed)
          - matanza <unfixed> (embed)
          - tdom <unfixed> (embed)
          - udunits <unfixed> (embed)
-Line 1381 
 quake3 (vanilla source not packaged in d
+Line 1436 
 quake3 (vanilla source not packaged in d
  quake2 (vanilla source not packaged in debian)
          - alien-arena <unfixable> (fork)
          - warsow <unfixable> (fork)
+ libtheora
+         - iceweasel <not-affected> (uses xulrunner)
+         - xulrunner <unfixed> (embed; bug #540959)
+         [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
+         [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed; bug #559276)
+         [etch] - iceape <not-affected> (introduced in iceape 2.0)
+         [lenny] - iceape <not-affected> (introduced in iceape 2.0)
+ dtoa
+         - bfilter <unfixed> (embed)
+         - cacao <unfixed> (embed)
+         - cdrdao <unfixed> (embed)
+         - classpath <unfixed> (embed)
+         - freej <unfixed> (embed)
+         - iceape <unfixed> (embed)
+         - iceweasel <unfixed> (embed)
+         - jscoverage <unfixed> (embed)
+         - kde4libs <unfixed> (embed)
+         - kdelibs <unfixed> (embed)
+         - kompozer <unfixed> (embed)
+         - libv8 <unfixed> (embed)
+         - mono <unfixed> (embed)
+         - newlib <unfixed> (embed)
+         - nspr <unfixed> (embed)
+         - php5 <unfixed> (embed)
+         - polyml <unfixed> (embed)
+         - qt4-x11 <unfixed> (embed)
+         - rhino <unfixed> (embed)
+         NOTE: code translated to Java
+         - ruby1.8 <unfixed> (embed)
+         - ruby1.9 <unfixed> (embed)
+         - ruby1.9.1 <unfixed> (embed)
+         - sdd <unfixed> (embed)
+         - sfind <unfixed> (embed)
+         - star <unfixed> (embed)
+         - tinymux <unfixed> (embed)
+         - virtualbox-ose <unfixed> (embed)
+         - webkit <unfixed> (embed)
+         - xulrunner <unfixed> (embed)
+ ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
+         - firegpg <unfixed> (embed)
+         - enigmail <unfixed> (embed)
+ ptmalloc (not packaged in Debian)
+         - crystalspace <unfixed> (embed)
+         - qt4-x11 <unfixed> (embed)
+ svgalib
+         - usplash <unfixed> (embed)
+ bogl
+         - usplash <unfixed> (embed)
+ taglist
+         - usplash <unfixed> (embed)
+ portaudio
+         - audacity <unfixed> (embed; bug #323711)
+ nyquist
+         - audacity <unfixed> (embed)
+         NOTE: embeds a forked nyquist with support for a shared library
+ vamp-plugin-sdk
+         - audacity <unfixed> (embed)
+ wordpress
+         - libwordpress-xmlrpc-perl <unfixed> (embed) [./xmlrpc.php]
+ php5
+         - php4 <removed> (old-version)

 Legend:



Removed from v.13420
 


changed lines


 
Added in v.13475
 Legend:



Removed from v.13420
 


changed lines


 
Added in v.13475
-Removed from v.13420
+Added in v.13475

	ViewVC Help
Powered by ViewVC 1.1.5