/[secure-testing]/data/embedded-code-copies

Diff of /data/embedded-code-copies

Parent Directory | Revision Log | View Patch Patch

-revision 13559 by jmm-guest,
Tue Dec 15 20:23:03 2009 UTC
+revision 16072 by geissert,
Sun Feb  6 18:51:52 2011 UTC
 Line 10 
 Format:
          - <embedding srcpkg> <status> (<sort>; bug #<number>)
          NOTE: optional comments about the linkage of the embedding srcpkg
- status: version number fixing the embedded copy, <unfixed>, <removed>,
+ status: version number fixing the embedded copy
-         <itp>, <not-affected>, <unknown> if the version number can not
+         <unfixed> if the issue is not yet fixed
-         be determined, or <unfixable> for unavoidable cases (e.g., forks
+         <removed> if the package was removed from the archive
-         that add real value)
+         <itp> if the package is in the process of being packaged
+         <not-affected> if the package does not use the embedded copy
+         <unknown> if the version number can not be determined
+         <unfixable> for unavoidable cases (e.g., forks that add real value)
  sort: static (linking statically against a lib)
-       embed (embedding a copy of the library into another source package)
+       embed (embeds a copy of the library into another source package)
-       fork (the package is not just embedding code but it is a fork and
+       modified-embed (embeds a code copy that differs from upstream code)
-             thus might share parts of the source code)
+       fork (a full-blown fork of another source package)
-       old-version (the package is an older version of essentially
+       old-version (an older version of essentially the same code)
-                    the same code)
  The srcpkg might be some string to identify the code if there is no
  specific source package.
  Everything up to the next line is ignored.
  ---BEGIN
- xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
+ poppler
-         NOTE: Fixed packages link to poppler library unless otherwise noted
          - pdftohtml <unknown>
          [sarge] - pdftohtml <unfixed>
          [etch] - pdftohtml <unfixed>
-Line 35 
 xpdf (some srcpkgs use xpdf2 code, some
+Line 36 
 xpdf (some srcpkgs use xpdf2 code, some
          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
          - texlive-base 3.0-12 (embed)
          - texlive-bin 2007-1 (embed)
-         NOTE: links to poppler
+         - koffice 1:2.0.0-1 (embed; bug #436163)
-         - koffice <unfixed> (embed; bug #436163)
          - libextractor 0.5.12-1 (embed)
          NOTE: libextractor is using its own pdf decoder now
          - ipe <unfixed> (embed)
          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
          - ruby-gnome2 <unknown> (embed)
-         NOTE: copy only present in source but links to poppler
          - pdfedit <unfixed> (embed; bug #510794)
-         - swftools <unfixed> (embed; bug #551293)
+         - swftools <removed> (embed; bug #551293)
-         - poppler <unfixable> (fork)
+         - xpdf 3.02-9 (fork)
+ pdksh (no longer developed since 1999)
+         - mksh <unfixable> (fork)
+         - posh <unfixable> (fork)
  ppmd
          - libcomplearn-mod-ppmd <unfixed> (fork)
-Line 53 
 ppmd
+Line 56 
 ppmd
  libevent
          - transmission 1.71-1 (embed; bug #529372)
+         - chromium-browser 5.0.375.29~r46008-1
+         - dnsproxy <unknown> (embed)
  lrmi
          - read-edid 2.0.0-1 (embed; bug #495131)
-Line 60 
 lrmi
+Line 65 
 lrmi
          - xresprobe <unfixed> (embed)
          - zhcon <unfixed> (embed)
+ php-htmlpurifier
+         - mahara 1.2.5-1 (embed)
+         - knowledgeroot 0.9.9.5-5 (embed)
+         - moodle <unfixed> (embed)
  peercast
          - gnome-peercast <removed> (embed)
          [etch] - gnome-peercast <unfixed> (embed)
-Line 71 
 icclib
+Line 81 
 icclib
          - ghostscript <unfixed> (embed)
          - argyll <unfixed> (embed)
+ libusb
+         - argyll <unfixed> (embed)
+         - ia32-libs <unfixable> (embed)
  dietlibc
          - ccontrol 0.9.1+20071204-1 (static)
+         - mksh <unfixable> (static)
+         NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
  libmikmod
+         - pysol-sound-server <unfixed> (modified-embed)
          - sdl-mixer1.2 <unfixed> (embed)
          TODO: report bug
+         - uqm 0.6.2.dfsg-8 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - black-box 1.4.6-2.2 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
  libiax
          - iaxmodem <unfixable> (embed; bug #548885)
-Line 84 
 libiax
+Line 105 
 libiax
  spandsp
          - iaxmodem <unfixable> (embed; bug #548885)
+ python-paramiko
+         - fabric 0.9.0-2 (embed; bug #561398)
  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
-         - dpkg <unfixed> (static)
+         - dpkg 1.15.6 (static)
          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
          - rsync <unfixed> (embed)
+         - cherokee <unfixed> (embed)
          NOTE: somehow derived code base
          - mono <unfixed> (embed)
          TODO: check mozilla
-         - Linux kernels <unfixed> (embed)
+         - linux-2.6 <unfixed> (embed)
          - pvpgn 1.7.8-2 (embed)
          - mrtg 2.12.2-1 (embed)
          - rpm <unknown> (embed)
-Line 101 
 zlib (lots of apps embed a copy, but lin
+Line 126 
 zlib (lots of apps embed a copy, but lin
          - tra <unfixed>
          - sash <unfixed>
          - nsis <unfixed>
+         - pyfits 1:2.3.1-1
          - mseide-msegui <unfixed>
          NOTE: mseide
          - mirrordir <unfixed>
          - poco <unfixed>
          - klibc <unfixed>
-         - ghostscript <unfixed>
+         - emboss 6.3.1-1 (embed)
+         - ghostscript 8.71~dfsg2-6 (embed)
+         NOTE: ghostscript fixed sometime before this, but this is the version i checked
          - freeimage <unfixed>
          - clamav <unfixed> (fork)
          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
-         - tuxonice-userui <unfixed>
+         - tuxonice-userui <unfixed> (static)
          - plt-scheme <unfixed>
          - perl <unfixed>
          - paraview <unfixed>
+         - velvet 0.7.56~nozlibcopy-1
          - gcvs <unfixed>
          - dump <unfixed>
          - aide <unfixed> (static)
-Line 128 
 zlib (lots of apps embed a copy, but lin
+Line 157 
 zlib (lots of apps embed a copy, but lin
          - gamera 3.2.3-1 (embed)
          - python2.4 <unfixed> (embed; bug #553403)
          - python2.5 <unfixed> (embed; bug #553403)
+         - texlive-bin <unknown> (embed)
  dulwich
          - hg-git 0.1.0-1 (embed; bug #541996)
-Line 138 
 libvigraimpex
+Line 168 
 libvigraimpex
          - gamera 3.2.3-1 (embed)
  libbz2
-         - dpkg <unfixed> (static)
+         - dpkg 1.15.6 (static)
+         - amd64-libs <unfixed> (static)
+         NOTE: let's call it "static"
+         - dar <unfixed> (static)
+         - dump <unfixed> (static)
+         - unalz 0.64-1 (embed)
+         NOTE: has code, by the maint, to use the system version but links against the internal copy
+         - clamav <unfixed> (embed)
+         NOTE: libclamav/nsis/bzlib*
+         - pristine-tar <unfixable> (modified-embed)
+         NOTE: compression code only, not uncompression
+         - r-base-core-ra 1.2.8 (static)
+         - r-base-core 2.11.1 (static)
+         NOTE: links dynamically in squeeze, statically in lenny
+         - rpm <unfixed> (static)
+         NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
+ libyahoo2
+         - centerim <unfixed> (embed; bug #559783)
+ libmsn
+         - centerim <unfixed> (embed; bug #559783)
  libgadu
          - centerim <unfixed> (embed; bug #559783)
-Line 155 
 xmlrpc (which package is the "origin" of
+Line 206 
 xmlrpc (which package is the "origin" of
          - phpgroupware <unfixed> (embed)
          - egroupware <unfixed> (embed)
          - phpwiki <unfixed> (embed)
-         - php4 <unfixed> (embed)
+         - php4 <removed> (embed)
          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
  shtool (affects build-time only)
          - mysql-ocaml <unfixed> (embed)
-         - php4 <unfixed> (embed)
+         - php4 <removed> (embed)
+         - php5 <unfixed> (embed)
- iceape
+ xulrunner
-         - iceweasel <unfixed> (fork)
+         - iceape <unfixed> (embed; bug #561749)
-         - icedove <unfixed> (fork)
+         - iceweasel 2.0.0.19 (embed)
-         - xulrunner <unfixed> (fork)
+         - icedove <unfixed> (embed; bug #561750)
          - kompozer <unfixed> (embed; bug #532168)
-         - galeon <unfixed> (fork)
+         - galeon 2.0.2-4 (embed)
-         - epiphany-browser <unfixed> (fork)
+         - epiphany-browser 2.14.3-8 (embed)
-         - conkeror <unfixed> (fork)
+         - conkeror 0.9~git080629-2 (embed)
-         - kazehakase <unfixed> (fork)
+         - kazehakase 0.4.2-1 (embed)
  xli
          - xloadimage <unfixed> (embed)
  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
          - openmotif <unfixed> (embed)
-         - libxpm <unfixed> (embed)
+ libxpm
+         - lesstif2 <unfixed> (embed; bug #575750)
+         - ia32-libs <unfixable> (embed)
  kerberized apps with BSD origin
          - krb4 <removed> (embed)
-Line 198 
 fudforum
+Line 253 
 fudforum
  libbsd
          - rdate 1:1.2-3 (embed)
          - atheme-services <unfixed>
-         - libbsd-arc4random-perl <unfixed>
+         - libbsd-arc4random-perl <not-affected> (modified-embed)
+         NOTE: code not used, it links dynamically against libbsd instead
          - isakmpd <unfixed>
          - bsdgames <unfixed> (embed)
          - bsd-mailx <unfixed> (embed)
          - netcat-openbsd <unfixed> (embed; bug #550611)
          - openssh <unfixed> (embed)
          - unworkable <unfixed> (embed)
+         - mksh <unfixed> (modified-embed)
+         NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
+         NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
+         NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
+         - ia32-libs <unfixable> (embed)
  cvs
          - gcvs <unfixed> (embed)
          NOTE: see cvsunix/src in tarball
  pcre3
-         - php4 <unknown> (embed)
+         - php4 <removed> (embed)
          - analog 2:5.23-0woody1 (embed)
+         - chicken 3.2.7-2 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - goffice <unfixed> (embed)
          NOTE: libgoffice-*
+         - hypermail 2.2.0.dfsg-2 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - privoxy 3.0.9-1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - vfu 4.06-4.1 (embed; bug #450754)
          - tf5 5.0beta7-1 (embed)
          - monotone 0.43-1 (embed)
-Line 231 
 pcre3
+Line 298 
 pcre3
          - qt4-x11 <unfixed> (embed)
          NOTE: embedded via webkit copy
          - erlang <unfixed> (embed)
+         - ssed <unfixed> (embed)
+         - ircd-hybrid <unfixed> (static)
+         - emboss <unfixed> (fork)
+         - cherokee <unfixed> (embed)
+         - oftc-hybrid 1.6.9.dfsg-1 (embed)
+         - ratbox-services <unfixed> (embed)
+         - squeak-vm <unfixed> (embed)
+         - tinymux <unfixed> (embed)
  tiff
          - wxwindows2.4 2.2.1 (embed)
          - gamera 3.2.3-1 (embed)
+         - freeimage <unfixed> (embed)
+         - libtk-img <unfixed> (embed)
+         NOTE: there are two copies, one under tiff/ other under libtiff/
+         - gdal <unfixed>
+         - ia32-libs <unfixable> (embed)
  uudeview
          - libconvert-uulib-perl <unfixed> (embed)
          - pan <unfixed> (embed)
- sqlite (not affected by security vulnerabilities so far)
+ sqlite
          - amarok <unfixed> (embed)
          - monotone 0.43-1 (embed)
          - iceweasel <unfixed> (embed)
          - heimdal <unfixed> (embed; bug #559616)
- util-linux/mount
+ util-linux
          - loop-aes-utils <unfixed> (embed)
          NOTE: contains code from util-linux' mount in the mount-aes-udeb
+         - ia32-libs <unfixable> (embed)
  sylpheed
          - sylpheed-claws <unfixed> (fork)
-Line 276 
 ffmpeg (libavcodec/libavformat)
+Line 357 
 ffmpeg (libavcodec/libavformat)
          TODO: gimp-gap (potentially using ffmpeg code as well)
          - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
          - audacity 1.3.7-2 (embed; bug #512278)
+         - chromium-browser <unfixed> (fork)
  faad2
          - mplayer 1.0~rc2-20 (embed)
          - avifile <unfixed> (embed; bug #538750)
-         - ffmpeg-debian <removed> (old-version)
+         - ffmpeg-debian <removed> (embed)
  libmad (MPEG decoding lib)
          - xine-lib <unfixed> (embed)
-Line 292 
 libdts
+Line 374 
 libdts
  flac
          - xine-lib <unfixed> (embed)
+         - ia32-libs <unfixable> (embed)
  liba52
          - a52dec <unfixed> (embed)
          - xine-lib <unfixed> (embed)
- libmpeg2
+ mpeg2dec (libmpeg2)
-         - mpeg2dec <unfixed> (embed)
          - xine-lib <unfixed> (embed)
+ libmpeg3
+         - squeak-vm <unfixed> (embed)
  libntlm
          - wget <unfixed> (fork; bug #550436)
          - curl <unfixed> (fork; bug #550437)
-Line 320 
 python-urlgrabber
+Line 405 
 python-urlgrabber
  beautifulsoup
          - python-mechanize <unfixed> (embed; bug #555349)
-         - zope2.11 <unfixed> (embed; bug #555350)
+         - zope2.11 <removed> (embed; bug #555350)
          - twill <unknown> (embed)
  halibut
-Line 331 
 libghttp
+Line 416 
 libghttp
  libsndfile
          - ardour 1:2.7.1-1 (embed)
+         - ia32-libs <unfixable> (embed)
  glibmm2.4
          - ardour 1:2.7.1-1 (embed)
-Line 340 
 libgnomecanvasmm2.6
+Line 426 
 libgnomecanvasmm2.6
  libsigc++-2.0
          - ardour 1:2.7.1-1 (embed)
+         - ia32-libs <unfixable> (embed)
  soundtouch
          - ardour 1:2.7.1-1 (embed)
-Line 354 
 fckeditor
+Line 441 
 fckeditor
          - karrigell <removed> (embed; bug #452598)
          - gforge 4.6.99+svn6225-1 (embed)
          - request-tracker3.8 <unfixed> (embed)
+         - otrs2 <unfixed> (embed)
  ipatlas (not packaged in Debian)
          - moodle <unfixed> (embed; bug #507185)
-Line 361 
 ipatlas (not packaged in Debian)
+Line 449 
 ipatlas (not packaged in Debian)
  libphp-phpmailer
          - moodle <unfixed> (embed; bug #507185)
          - mahara <unfixed> (embed)
-         - symfony <unfixed> (embed)
+         - symfony <unfixed> (embed; bug #566778)
          [etch] - phpgroupware <unfixed> (embed)
          NOTE: phpgroupware-felamimail is only in etch
          - egroupware <unfixed> (embed; bug #504283)
-Line 387 
 TinyMCE
+Line 475 
 TinyMCE
          - moodle <unfixed> (embed; bug #507185)
          - knowledgeroot <unfixed> (embed)
          - joomla <itp> (bug #326398)
+         - mahara 1.2.6-1 (embed; #597752)
  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
          - scite <unfixed> (embed)
-Line 412 
 libphp-adodb
+Line 501 
 libphp-adodb
          - mahara <unfixed> (embed)
  gzip
-         - linux-kernel <unfixed> (embed)
+         - linux-2.6 <unfixed> (embed) [lib/inflate.c]
-         NOTE: lib/inflate.c
          - klibc <unfixed> (embed)
          NOTE: based on linux-kernel gzip code
          - busybox <unfixed> (embed)
+         - pristine-tar <unfixed> (modified-embed)
+         NOTE: compression code only, not uncompression
+         - ncompress <unfixed> (old-version)
  neon
          - cadaver 0.22.3+debian-1 (embed; bug #188381)
-Line 424 
 neon
+Line 515 
 neon
          [etch] - litmus <unfixed> (embed; #395875)
          - litmus <removed> (embed; #395875)
          [sarge] - screem <unfixed> (embed)
-         - sitecopy 1:0.16.3-5 (embed; bug #395876)
+         - sitecopy 1:0.16.0-1 (embed; bug #395876)
          [etch] - tla <unfixed> (embed; bug #395877)
          [sarge] - tla <unfixed> (embed; bug #395877)
  libmodplug
-         - gst-plugins-bad0.10 <unfixed> (embed)
+         - gst-plugins-bad0.10 0.10.10.2-1 (embed)
  libvncserver
          - vino <unfixed> (embed)
-Line 437 
 libvncserver
+Line 528 
 libvncserver
  putty
          - filezilla <unfixed> (embed)
- tinyxml (not packaged in Debian; itp bug #531968)
+ tinyxml
          - filezilla <unfixed>
          - crystalspace <unfixed> (embed)
          - libwfut <unfixed> (embed)
-Line 475 
 gv
+Line 566 
 gv
          NOTE: evince-gtk is affected (a component of evince source package)
  libXbae
-         - paw <removed> (embed)
+         - paw <unfixed> (embed)
-         [etch] - paw <unfixed> (embed)
  libgtkhtml
          - claws-mail-extra-plugins <unfixed> (fork)
  libXaw
-         - paw <removed> (embed)
+         - paw <unfixed> (embed)
-         [etch] - paw <unfixed> (embed)
          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
+         - ia32-libs <unfixable> (embed)
  libgd2
-         - graphviz <unfixed> (embed)
+         - graphviz 2.16-1 (embed)
          NOTE: lib/gd seems to be 2.0.33
-         - wml <unfixed> (embed)
+         - wml 2.0.11ds2-1 (embed)
          - libwmf <unfixed> (embed)
-         NOTE: derived from gd 1.6.3
+         NOTE: derived from gd 1.6.3, but only used to write images
+         - plt-scheme <unfixed> (embed; bug #601525)
+         - texlive-bin 2009-1 (embed)
  rar
          - unrar-nonfree <unfixed> (embed)
-Line 521 
 librpcsecgss
+Line 613 
 librpcsecgss
          - krb5 <unfixed> (embed)
  jasper
-         - ghostscript 8.70~dfsg-2+b1 (embed)
+         - ghostscript 8.64~dfsg-2 (embed)
-         - ghostscript <unfixed> (static)
  libiris
          - psi <unfixed> (embed)
-Line 537 
 libidn
+Line 628 
 libidn
          NOTE: psi embeds libiris which embeds libidn
          - kdegames <unfixed> (embed)
          NOTE: kdegames/kde4 embeds libiris which embeds libidn
+         - ia32-libs <unfixable> (embed)
- liblua
+ lua5.1
          - monotone 0.43-1 (embed)
          - nmap 5.00-1 (embed; bug #527997)
          [lenny] - nmap <unfixed> (embed; bug #527997)
-Line 546 
 liblua
+Line 638 
 liblua
          - enigma <unfixed> (embed)
          NOTE: requires lua built with C++
          - freeciv <unfixed> (embed)
+         - spring <unfixed> (embed)
  libbotan
          - monotone 0.43-1 (embed)
-Line 559 
 libgc
+Line 652 
 libgc
  lzma
          - p7zip <unfixed> (embed)
          - xz-utils <unfixed> (fork)
+         - r-base <unfixed> (embed)
+         NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
  lzo
          - grub2 <unfixed> (embed)
  yassl
          - mysql-dfsg-5.0 <unfixed> (embed)
+         - mysql-5.1 <unfixed> (embed)
  pax code
          - tar <unfixed> (embed)
-Line 573 
 pax code
+Line 669 
 pax code
  t1lib
          - tetex-bin 2.0.2-1 (embed)
          - texlive-bin <unknown> (embed)
+         - grace 5.1.14-2 (embed)
+         NOTE: Might be fixed even earlier
  guichan
          - boswars <unfixed> (embed)
-Line 616 
 plib1.8.4c2
+Line 714 
 plib1.8.4c2
          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
  fribidi
-         - quesoglc <unfixed> (embed)
+         - quesoglc 0.7.2-2 (embed)
-         NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
  glew
          - quesoglc <unfixed> (embed; bug #489341)
          NOTE: waiting on GLEW_MX version of glew (see bug #474488)
-         - trigger <unfixed> (embed)
+         - trigger 0.5.2.1-2 (embed)
          NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
-         - trigger-rally <unfixed> (embed)
+         - trigger-rally 0.5.2.1-2 (embed)
          NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
+         - chromium-browser 5.0.375.70~r48679-2
  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
          - transcend <unfixed> (embed)
-Line 641 
 cpio
+Line 739 
 cpio
          - libarchive <unfixed> (embed)
          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
+ kde4libs
+         - kdelibs <unfixable> (old-version)
  webkit
          - qt4-x11 <unfixed> (embed; bug #479851)
-         - kdelibs <unfixed> (old-version)
+         [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
-         - kde4libs <unfixed> (fork)
+         - kde4libs <unfixable> (fork)
+         NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
+         NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
+         - chromium-browser <unfixed> (fork)
  ftgl
          - blender 2.46+dfsg-1 (embed)
+         - vtk <unfixed> (embed)
+         - paraview <unfixed> (embed)
+         NOTE: as part of its copy of vtk
+         - tulip <unfixed> (embed)
+         NOTE: depends on -dev but string found on binary
+         - root-system <unknown> (embed)
+         NOTE: depends on -dev package; not confirmed at source
+         - rgl <unknown> (embed)
+         NOTE: not sure if it is built
+         - mysql-gui-tools <unknown> (embed)
+         NOTE: not sure if it is built
+         - k3d <unfixed> (embed)
+         - extremetuxracer <unknown> (embed)
+         NOTE: not sure if it is built
+         - critterding <unknown> (embed)
+         - lightspeed <unfixed>
+         NOTE: depends on -dev but string found on binary
  wv
          - abiword <unfixed>
  qemu
-         - kvm <unfixed> (embed; bug #543159)
+         - kvm <removed> (embed; bug #543159)
-         NOTE: the kvm package will be removed from sid and squeeze soon (after
-         NOTE: which it will only be in experimental). superceded by qemu-kvm.
          - qemu-kvm <unfixed> (embed; bug #560853)
+         NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
          - xen-3 3.4.2-2 (embed; bug #560856)
          - xen-unstable <unfixed> (embed; bug #560856)
  vgabios
-         - kvm <unfixed> (embed; bug #489442)
+         - kvm <removed> (embed; bug #489442)
+         - qemu-kvm <unfixed> (embed)
  bochs
-         - kvm <unfixed> (embed; bug #489442)
+         - kvm <removed> (embed; bug #489442)
+         - qemu-kvm <unfixed> (embed)
  speex
          - vorbis-tools <unfixed> (embed)
-Line 673 
 speex
+Line 795 
 speex
          - xine-lib <unfixed> (embed)
          - libfishsound <unfixed> (embed)
          - libannodex <removed> (embed)
+         - opal 3.4.2~dfsg-2 (embed)
+         - mumble 1.2.0~beta1-1 (embed)
          - vlc <unfixed> (embed)
          - xmms-speex <unfixed> (embed)
          - libsdl-sound1.2 <unfixed> (embed)
-Line 698 
 mochikit
+Line 822 
 mochikit
          - coherence 0.6.2-1 (embed)
          - paste <unfixed> (embed)
          - turbogears <unfixed> (embed)
-         - plone3 <unfixed> (embed)
+         - plone3 <removed> (embed)
          - xulrunner <unfixed> (embed)
          - libjifty-plugin-chart-perl <unfixed> (embed)
          - sabnzbdplus <unfixed> (embed)
-Line 712 
 prototypejs
+Line 836 
 prototypejs
          - libjson-ruby 1.1.4-1 (embed; bug #555224)
          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
          - horde3 <unfixed> (embed)
-         - knowledgeroot <unfixed> (embed; bug #555230)
+         - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
-         - mediatomb <unfixed> (embed; bug #555233)
+         - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
          - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
          - ebug-http <unfixed> (embed; bug #555236)
+         - libaws 2.7-1 (embed; bug #555222)
          - phpgedview <removed> (embed)
-         - poker-network <unfixed> (embed; bug #555238)
+         - poker-network 1.7.6-1 (embed; bug #555238)
          - rails 2.1.0-6 (embed)
          - wordpress 2.5.0-2 (embed; bug #555243)
          - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
-Line 726 
 prototypejs
+Line 851 
 prototypejs
          - exaile 0.2.14+debian-2.1 (embed; bug #555245)
          - hobix 0.5~svn20070319-4 (embed; bug #555247)
          - zabbix 1.6.6-4 (embed; bug #555250)
-         - chora2 <unfixed> (embed; bug #555253)
+         - chora2 2.1.1+debian0-1 (embed; bug #555253)
-         - gollem <unfixed> (embed; bug # 555254)
+         - gollem 1.1.1+debian0-1 (embed; bug # 555254)
          - jscropperui 1.2.1-1 (embed; bug #555257)
          - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
-         - ingo1 <unfixed> (embed; bug #555261)
+         - ingo1 1.2.3+debian0-1 (embed; bug #555261)
-         - kronolith2 <unfixed> (embed; bug #555262)
+         - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
-         - activeldap <unfixed> (embed)
+         - activeldap 1.2.1-1 (embed)
          - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
-         - mantis <unfixed> (embed; bug #555265)
+         - mantis 1.1.2+dfsg-1 (embed; bug #555265)
          - otrs2 2.3.4-6 (embed; bug #555267)
-         - webcalendar <unfixed> (embed; bug #555269)
+         - webcalendar 1.2~b1-2 (embed; bug #555269)
          - redmine 0.9.0~svn2907-1 (embed; bug #555270)
          - jifty 0.90519-1 (embed; bug #555271)
-         - jquery <unfixed> (embed; bug #555272)
+         - jquery 1.4-1 (embed; bug #555272)
          - passenger 2.2.5debian1-1 (embed; bug #555273)
-         - plone3 <unfixed> (embed; bug #555275)
+         - plone3 <removed> (embed; bug #555275)
          - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
          - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
          - xulrunner <unfixed> (embed)
          NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
+         - jclicmoodle <unfixed> (embed)
+         - git-cola <unfixed> (embed)
  gdb
          - insight <unfixed> (embed)
  e2fsprogs
          - ldiskfsprogs <unfixable> (fork)
+         - ia32-libs <unfixable> (embed)
  quazip (not packaged in Debian)
          - qcake <unfixed> (embed)
-Line 789 
 jquery
+Line 917 
 jquery
          NOTE: compressed file under examples/ dir
          - prewikka <unfixed> (embed)
          - libramaze-ruby <unfixed> (embed)
-         - drupal5 <unfixed> (embed)
+         - drupal6 <unfixed> (embed)
          - b2evolution <unfixed> (embed)
          - wesnoth <unfixed> (embed)
+         - gammu 1.28.95-1 (embed)
  tablesorter (jquery plugin, not packaged yet)
          - wesnoth <unfixed> (embed)
-Line 809 
 magpierss
+Line 938 
 magpierss
  php-gettext
          - wordpress 2.8.4-1 (embed; bug #504242)
+         - docbookwiki <unfixed> (embed)
+         - knowledgeroot 0.9.9.5-1
+         NOTE: non-free
  libphp-ixr (name may change, it is the Incutio XML-RPC)
          - wordpress <unfixed> (embed; bug #504242)
-Line 843 
 libmarkdown-php
+Line 975 
 libmarkdown-php
          - pixelpost 1.7.1-6 (embed)
  php-openid
-         - wordpress-openid <itp> (embed)
+         - wordpress-openid 3.3.2-1 (embed)
  geshi
          - dokuwiki 0.0.20080505-3.1 (embed)
-Line 854 
 webcalendar
+Line 986 
 webcalendar
          - gforge 4.7~rc2-6 (embed; bug #504758)
  libical
-         - kdepim <unfixed> (fork)
+         - kdepim <unknown> (fork)
-         - kdepimlibs <unfixed> (fork)
+         NOTE: fixed at some point during 4.0
-         NOTE: fixed in KDE4 post 4.1.x series
+         - kdepimlibs 4.2.0-1 (fork)
          - claws-mail-extra-plugins <unfixed> (fork)
- libltdl3
-         - kdelibs <unfixed> (embed)
-         NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
-         - synfig <unfixed> (embed)
  harfbuzz
          - qt4-x11 <unfixed> (embed)
+         - pango1.0 <unfixed> (embed)
+         - fontmatrix <unfixed> (embed)
  libzip
-         - php5 <unfixed> (fork)
+         - php5 <unfixable> (modified-embed)
          - odt2txt <unfixed> (embed; bug #523808)
  json.php (not packaged; should be replaced with php's built-in functions)
-Line 911 
 rssparser (http://nwow.org)
+Line 1040 
 rssparser (http://nwow.org)
  lcms
          - openjdk-6 <unfixed> (fork)
+         - gimp 2.4.0~rc2-2
+         - ia32-libs <unfixable> (embed)
  libphp-phplayersmenu
          - diogenes <unfixed>
-Line 923 
 libphp-pclzip
+Line 1054 
 libphp-pclzip
  libphp-simplepie
          - dokuwiki <unfixed>
+         - wordpress <unfixed>
  libphp-jpgraph
          - egroupware <unfixed>
-Line 931 
 php-simpletest
+Line 1063 
 php-simpletest
          - moodle <unfixed>
  libpng
+         - doxygen 1.5.6-2 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - gdal 1.5.2-3 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - iceweasel <not-affected> (uses xulrunner)
          - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
          - iceape 1.0.13~pre080614i-0etch1 (embed)
+         - libfltk1.1 1.1.9-6 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - libtk-img <unfixed> (embed)
+         - htmldoc 1.8.27-3 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - xulrunner 1.9.0.13-1 (embed)
          [lenny] - xulrunner 1.9.0.11-0lenny1
          [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
          - gamera 3.2.3-1 (embed)
+         - freeimage <unfixed> (embed)
+         - syslinux-common <unfixable> (embed)
+         - tuxonice-userui <unfixed> (static)
+         - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - vice 1.22.dfsg1-0.1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - visualboyadvance 1.8.0-4 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - ia32-libs <unfixable> (embed)
  irssi
          - silc-client <unfixed> (embed)
-Line 956 
 libitext-java
+Line 1107 
 libitext-java
  python-ply
          - pyke <unfixed> (embed; bug #555363)
-         - pywbem <unfixed> (embed; bug #555364)
+         - pywbem 0.7.0-4 (embed; bug #555364)
          - sepolgen <unfixed> (embed; bug #555365)
          - zope-textindexng3 <unknown> (embed)
          - iceweasel <not-affected> (uses xulrunner)
-Line 981 
 yajl
+Line 1132 
 yajl
  nusoap
          - gforge 4.8.2-1 (embed)
+         - ampache <unfixed> (embed)
+         - poker-network <unfixed> (embed)
+         - moodle <unfixed> (embed)
+         NOTE: code is not used when running under php5 and soap is enabled
+         - phpwiki <unfixed> (embed)
+         - gallery2 <unfixed> (embed)
+         - typo3-src <unfixed> (embed)
+         - phpgacl 3.3.7-7 (embed)
+         - mantis 1.1.8+dfsg-1 (embed)
  libept
          - adept <unfixed> (embed; bug #540649)
-Line 993 
 libvorbis
+Line 1153 
 libvorbis
          - iceape <unfixed> (embed)
          [etch] - iceape <not-affected> (introduced in 2.0)
          [lenny] - iceape <not-affected> (introduced in 2.0)
+         - ia32-libs <unfixable> (embed)
  cairo
          - iceweasel <not-affected> (uses xulrunner)
-Line 1017 
 liboggplay
+Line 1178 
 liboggplay
          [lenny] - iceape <not-affected> (introduced in 2.0)
  php-net-dnsbl
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740; package in NEW)
  php-onyx-rss
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
  php-text-wiki
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740; package in NEW)
  php-xml-rpc
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740; package in NEW)
  polarssl (does not have a shared library)
          - pdkim <itp> (embed; bug #543150)
          - xyssl <unfixed> (old-version)
- pidgin
+ pidgin (libpurple)
          - gaim <removed> (old-version)
-         - qutecom <unfixed> (embed; bug #559785)
+         - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
+         - wengophone <unfixed> (embed; bug #601425)
  icu
          - webkit 1.0.1-1 (embed; bug #547214)
          - texlive-bin <unfixed> (fork)
          NOTE: texlive upstream working with icu upstream to merge their changes
+         - chromium-browser 5.0.375.29~r46008-3
  cyrus-imapd-2.2
          - kolab-cyrus-imapd <unfixed> (fork)
-Line 1054 
 zipios++
+Line 1217 
 zipios++
          NOTE: likely fixed earlier, marking etch's version as fixed
  linux-2.6
-         - kvm <unfixed> (embed; bug #549973) [./kernel/*]
+         - kvm <removed> (embed; bug #549973) [./kernel/*]
          - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
          - kernel-source-2.6.8 <removed> (old-version)
          - kernel-source-2.4.27 <removed> (old-version)
-Line 1063 
 linux-2.6
+Line 1226 
 linux-2.6
          - kernel-source-2.2.20 <removed> (old-version)
  libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
-         - kvm <unfixed> (embed) [./libfdt/*]
+         - kvm <removed> (embed) [./libfdt/*]
+         - qemu-kvm <unfixed> (embed) [./libfdt/*]
  qweb (not packaged)
          - ajaxterm <unfixed>
-Line 1083 
 expat
+Line 1247 
 expat
          - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
          - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
          - python2.4 <unfixable> (embed; bug #553403)
+         - python2.7 2.7-6 (embed)
+         - mcabber 0.10.0-1 (low; bug #601053)
          - python-4suite <unfixed> (embed; bug #516935)
          - wxwindows2.4 <removed> (embed)
          - wxwidgets2.6 2.6.3.2.2-4 (embed)
          - wxwidgets2.8 2.8.10.1-2 (embed)
-         - celementtree <unfixed> (embed)
+         - albert <unfixed> (embed; bug #600974)
+         - celementtree 1.0.5-8 (embed)
+         NOTE: Maybe that was fixed even earlier
+         - centerim <unfixed> (embed; bug #559783)
          - audacity 1.3.2-1 (embed)
          - matanza <unfixed> (embed)
-         - tdom <unfixed> (embed)
+         - tdom 0.8.3~20080525-1 (embed)
-         - udunits <unfixed> (embed)
+         - udunits 2.1.8-4 (embed)
          - apr-util 1.2 (embed)
          - ayttm <unfxed> (embed; bug #561006)
          - cableswig <unfixed> (embed)
          - cadaver <unfixed> (embed)
          - cmake 2.6.0-6 (embed)
          - coin3 <unfixed> (embed)
+         - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - dasher 4.7.3-1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - emboss 6.3.1-1 (embed)
          - gdcm 2.0.14-2 (embed)
-         - ghostscript <unfixed> (embed)
+         - ghostscript 8.71~dfsg-2 (embed)
-         - grmonitor <unfixed> (embed)
+         - grmonitor <removed> (embed)
          - iceape <unfixed> (embed)
-         - insighttoolkit <unfixed> (embed)
+         - insighttoolkit 3.16.0-1 (embed)
-         - libparagui1.1 <unfixed> (embed)
+         NOTE: insighttoolkit might've been fixed earlier
-         - paraview <unfixed> (embed)
+         - jabber 1.4.3-3.4 (embed)
-         - poco <unfixed> (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - libparagui1.1 1.0.2-1 (embed)
+         - libspiff1 0.8.3-1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - paraview 3.6.2-1 (embed)
+         - poco 1.3.6p1-1 (embed)
+         - scorched3d 41.3dfsg-1+b1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - simgear <unfixed> (embed)
-         - sitecopy <unfixed> (embed)
+         - sitecopy 1:0.16.0-1
-         - smart 1.0-1 (embed)
+         - smart <unfixed> (embed)
-         [etch] - smart <unfixed> (embed)
+         NOTE: smart embeds celementree, and it includes expat
-         - swish-e <unfixed> (embed)
+         - swish-e <not-affected> (Linked against libxml, which is used instead)
-         - tla <unfixed> (embed)
+         - tla 1.3.5+dfsg-15 (embed)
-         - vtk <unfixed> (embed)
+         - vtk 4.1.20030227-1 (embed)
-         - wbxml2 <unfixed> (embed)
+         - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
          - xmlrpc-c <unfixed> (embed)
          - iceweasel <unfixed> (embed)
          - kompozer <unfixed> (embed)
          - vxl 1.13.0-2 (embed)
          - xulrunner <unfixed> (embed)
+         - xmame 0.106-2.1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - apache2 2.2 (embed)
-         - texlive-bin <unfixed> (embed) [included twice]
+         - texlive-bin <not-affected> (Embedded code not compiled in)
          - vnc4 <unfixed> (embed)
-         - xotcl <unfixed> (embed)
+         - xotcl 1.6.6-1 (embed)
+         - chromium-browser 5.0.375.29~r46008-3
+         - ia32-libs <unfixable> (embed)
  xerces-c
          - xerces-c2 <unfixed> (old-version)
-Line 1132 
 md5 (RSA's version; not the gnu version
+Line 1317 
 md5 (RSA's version; not the gnu version
          - w3c-libwww <removed> (embed; bug #551942)
          [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
+ libparagui1.1
+         - asc <unfixable> (fork)
  enet
          - sauerbraten <unfixed> (embed; #497194)
  eglibc
          - glibc <removed> (old-version)
+         - mksh <unfixable> (static)
+           NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
  galib
          - gamera 3.2.3-1 (embed)
-Line 1159 
 configobj
+Line 1349 
 configobj
  python-clientform
          - bibus <unfixed> (embed; bug #555332)
          - zope2.10 <unfixed> (embed; bug #555333)
-         - zope2.11 <unfixed> (embed; bug #555334)
+         - zope2.11 <removed> (embed; bug #555334)
          - python-mechanize <unknown> (embed)
          - twill <unknown> (embed)
  python-mechanize
          - zope2.10 <unfixed> (embed; bug #555337)
-         - zope2.11 <unfixed> (embed; bug #555338)
+         - zope2.11 <removed> (embed; bug #555338)
          - twill <unknown> (embed; bug #555339)
  pexpect
-Line 1178 
 pyparsing
+Line 1368 
 pyparsing
          - boa-constructor 0.6.1-8 (embed; bug #555367)
          - calibre <unfixed> (embed; bug #555368)
          - matplotlib <unfixed> (embed; bug #531024)
-         - zhpy <unfixed> (embed; bug #555370)
+         - zhpy 1.7.3.1-1 (embed; bug #555370)
          - polybori <unknown> (embed)
          - python-whoosh <unknown> (embed)
          - twill <unknown> (embed)
-Line 1190 
 python-pysqlite2
+Line 1380 
 python-pysqlite2
  celementtree
          - python2.5 <unfixed> (embed)
-         - smart 1.0-1 (embed)
+         - smart <unfixed> (embed)
-         [etch] - smart <unfixed> (embed)
  elementtree
          - python2.5 <unfixed> (embed)
+         - python2.6 <unfixed> (embed)
          - bzr <unfixed> (embed; bug #555343)
          - gedit 2.28.2-1 (embed; bug #555344)
-         - smart 1.0-1 (embed)
+         - smart <unfixed> (embed)
-         [etch] - smart <unfixed> (embed)
          - solfege <unfixed> (embed; bug #555345)
          - w3af <unfixed> (embed; bug #555346)
          - python-qt4 <unknown> (embed)
-Line 1219 
 python2.5
+Line 1408 
 python2.5
          NOTE: embeds stdlib modules: ConfigParser
          - museek+ <unfixed> (embed; bug #555428)
          NOTE: embeds stdlib modules: ConfigParser
-         - vegastrike-data <unfixed> (embed)
+         - vegastrike-data <removed> (embed)
          NOTE: embeds many stdlib modules
          - codespeak-lib 1.1.1-1 (embed; bug #555420)
          NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
-Line 1249 
 python2.5
+Line 1438 
 python2.5
          NOTE: embeds stdlib modules: uuid
          - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
          NOTE: embeds stdlib modules: uuid
-         - setroubleshoot <unfixed> (embed; bug #555431)
+         - setroubleshoot <removed> (embed; bug #555431)
          NOTE: embeds stdlib modules: uuid
          - linkchecker <unfixed> (embed; bug #555414)
          NOTE: embeds msgfmt.py script
-Line 1259 
 python2.5
+Line 1448 
 python2.5
          NOTE: embeds msgfmt.py script
          - moin <unfixed> (embed)
          NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
-         - plone3 <unfixed> (embed)
+         - plone3 <removed> (embed)
          NOTE: embeds msgfmt.py script
          - roundup <unfixed> (embed)
          NOTE: embeds msgfmt.py script, stdlib modules: cgitb
-Line 1271 
 python2.5
+Line 1460 
 python2.5
          NOTE: embeds msgfmt.py script, stdlib modules: uuid
          - calibre <unfixed> (embed)
          NOTE: embeds msgfmt.py script, stdlib modules: zipfile
-         - mailman <unfixed> (embed; #555416)
+         - mailman 1:2.1.13-1 (embed; #555416)
          NOTE: embeds msgfmt.py script
          - python-docutils <unknown> (embed)
          NOTE: embeds stdlib modules: optparse, textwrap
-Line 1331 
 distribute
+Line 1520 
 distribute
          - setuptools <removed> (old-version)
  rails
-         - jruby1.2 <unfixed> (embed) [./bench/rails/*]
+         - jruby1.2 <removed> (embed) [./bench/rails/*]
+         NOTE: jruby is in non-free, it probably includes rails too
          - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
          - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
          - thin <unfixed> (embed) [./spec/rails_app/*]
-Line 1382 
 feedparser
+Line 1572 
 feedparser
          - freevo <unfixed> (embed; bug #555353)
          - pida <unfixed> (embed; bug #555354)
          - planet-venus <unfixed> (embed; bug #555355)
-         - plone3 <unfixed> (embed; bug #555356)
+         - plone3 <removed> (embed; bug #555356)
          - exaile 0.2.14+debian-1 (embed)
          - screenlets 0.1.2-3 (embed)
          NOTE: included twice
-Line 1398 
 agg:
+Line 1588 
 agg:
  vtk
          - paraview <unfixable> (embed; bug #495426)
+         - libmesh <unfixed>
+         NOTE: embeds exodus; not sure if there's a version external to vtk
  txt2tags
          - rednotebook <unfixed> (embed)
-Line 1412 
 htmltextview (not packaged in Debian, ht
+Line 1604 
 htmltextview (not packaged in Debian, ht
  horde3 (prototype.js is among the embeds in the following)
          - mnemo2 <unfixed> (embed)
          - nag2 <unfixed> (embed)
+         - wordpress <unfixed> (embed)
+         NOTE: Text_Diff (wp-includes/Text/Diff*)
  cimg
-         - gmic <itp> (embed)
+         - gmic <unfixed> (embed)
  mootools
-         - gmic <itp> (embed)
+         - kdenetwork <unfixed> (embed)
+         - gallery <unfixed> (embed)
+         - jspwiki <unfixed> (embed)
+         - vdr-plugin-live <unfixed> (embed)
+         - perl-doc-html <unfixed> (embed)
  openldap
          - openldap2.3 <removed> (old-version)
+         - ia32-libs <unfixable> (embed)
  grub2
          - grub <unfixed> (old-version)
-Line 1434 
 python-dateutil
+Line 1633 
 python-dateutil
  cups
          - cupsys <removed> (old-version)
+         - ia32-libs <unfixable> (embed)
  yui
          - bcfg2 <not-affected> (present in source but not included in any binary files)
-         - serendipity <unfixed> (embed; bug #557746)
+         - serendipity 1.5.3-1 (embed; bug #557746)
          - moodle 1.8.2.dfsg-5 (embed)
          - jifty 0.91117-1 (embed; bug #557748)
          - webgui 7.7.26-1 (embed)
          - loggerhead 1.17-1 (embed)
+         - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
  quake3 (vanilla source not packaged in debian)
          - openarena <unfixable> (fork)
-Line 1461 
 libtheora
+Line 1662 
 libtheora
  dtoa
          - bfilter <unfixed> (embed)
-         - cacao <unfixed> (embed)
+         - cacao <removed> (embed)
          - cdrdao <unfixed> (embed)
          - classpath <unfixed> (embed)
          - freej <unfixed> (embed)
-Line 1501 
 ptmalloc (not packaged in Debian)
+Line 1702 
 ptmalloc (not packaged in Debian)
  svgalib
          - usplash <unfixed> (embed)
+         - ia32-libs <unfixable> (embed)
  bogl
          - usplash <unfixed> (embed)
-Line 1520 
 vamp-plugin-sdk
+Line 1722 
 vamp-plugin-sdk
  wordpress
          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
+         - wordpress-mu <removed> (fork)
  php5
          - php4 <removed> (old-version)
  classpath
-         - libgnucrypto-java <unfixed> (embed; bug #559788)
+         - libgnucrypto-java <removed> (embed; bug #559788)
  libtool
          - apr <unfixed> (static; bug #489625)
          NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
          - arts <unfixed> (embed)
-         - bochs <unfixed> (embed; bug #560884)
+         - bochs 2.4.2-1 (embed; bug #560884)
          - camserv <unfixed> (embed)
-         - collectd <unfixed> (embed)
+         - collectd 4.8.2-1 (embed)
-         - courier-authlib <unfixed> (embed)
+         - courier-authlib 0.58-4 (embed)
-         - cvsnt <unfixed> (embed)
+         NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
+         - cvsnt 2.5.04.3236-1.2 (embed)
          - dico <not-affected> (Uses the system copy of ltdl)
          - freeradius 0.1+20010527-1 (embed)
          NOTE: Earliest reference I could find from the changelog is from 27 May 2001
-         - ggobi <unfixed> (embed)
+         - ggobi 2.1.9~20091212-1 (embed)
-         - glame <unfixed> (embed)
+         - glame 2.0.1-4 (embed)
-         - gnash <unfixed> (embed)
+         NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
-         - gnu-smalltalk <unfixed> (embed)
+         - gnash 0.8.7-2 (embed)
-         - google-gadgets <unfixed> (embed)
+         - gnu-smalltalk <unfixed> (embed; bug #566777)
+         - google-gadgets 0.10.5-0.3 (embed)
+         NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
          - graphicsmagick 1.3.5-6 (embed)
          - graphviz 2.8-3 (embed)
          NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
-         - guile-1.6 <unfixed> (embed)
+         - guile-1.6 1.6.8-7 (embed)
-         - hamlib <unfixed> (embed)
+         - hamlib 1.2.11-1 (embed)
-         - hercules <unfixed> (embed)
+         - hercules 3.06-1.2 (embed)
          - jags 1.0.4-3 (embed; bug #560864)
          - kdelibs <unfixed> (embed)
          - libannodex <removed> (embed)
-         - libextractor <unfixed> (embed)
+         - libextractor 0.5.23+dfsg-4 (embed)
          - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
-         - libtunepimp <unfixed> (embed)
+         - libtunepimp 0.5.3-7.3 (embed)
-         - mp4h <unfixed> (embed)
+         - mp4h 1.3.1-4.1 (embed)
-         - naim <unfixed> (embed)
+         - naim <removed> (embed)
          - parser-mysql <unfixed> (embed)
-         - pinball <unfixed> (embed)
+         - pinball 0.3.1-11 (embed)
          - redland <unfixed> (embed)
          - siproxd <unfixed> (embed)
          - ski <unfixed> (embed)
-         - synfig <unfixed> (embed)
+         - synfig 0.62.00-1 (embed)
          - unixodbc 2.2.4-5 (embed)
-         - xmlsec1 1.2.14-1 (embed)
+         - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
-         - clamav <unfixed> (embed)
+         - clamav 0.95+dfsg-1 (embed)
-         - imagemagick <unfixed> (embed)
+         - imagemagick 6:6.2.3.1-1 (embed)
          - hypre 2.4.0b-5 (embed)
          - lam <unfixed> (embed)
          - openmpi <unfixable> (embed; bug #559386)
          - parser <unfixed> (embed)
-         - pdsh <unfixed> (embed; bug #560892)
+         - pdsh 2.18-5 (embed; bug #560892)
          - sbnc 1.2-8 (embed)
          - sdcc <unfixed> (embed)
-         - wml <unfixed> (embed)
+         - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
-         - proftpd-dfsg <unfixed> (embed)
+         - proftpd-dfsg <unfixed> (embed; bug #561748)
          - babel 1.4.0.dfsg-5 (embed)
-         - libprelude <unfixed> (embed)
+         - libprelude 0.9.14-2 (embed)
          - heartbeat 2.1.4-7 (embed)
          NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
          NOTE: might've been fixed earlier
          - gcc-* <unknown> (embed)
+         - ia32-libs <unfixable> (embed)
  ocamlgsl
          - orpie 1.5.1-7.1 (embed; bug #550058)
-Line 1592 
 xdotool
+Line 1799 
 xdotool
  bulletphysics (not packaged; http://www.bulletphysics.org/)
          - supertuxkart <unfixed> (embed)
+         - blender <unfixed> (embed)
+ ghostscript
+         - gs-gpl <removed> (old-version)
+ icedove
+         - thunderbird <removed> (old-version)
+ sizzlejs (not packaged in Debian, http://sizzlejs.com/)
+         - jquery <unfixed> (embed)
+ sed
+         - ssed <unfixed> (fork)
+ phpatomlib (http://code.google.com/p/phpatomlib)
+         - wordpress <unfixed> (embed)
+ Services_JSON (http://pear.php.net/package/Services_JSON)
+         - wordpress <unfixed> (embed)
+ phpass (http://www.openwall.com/phpass/)
+         - gallery2 <unfixed> (embed)
+         - wordpress <unfixed> (embed)
+         - typo3-src <unfixed> (modified-embed)
+         NOTE: file refers to drupal, maybe there's a copy somewhere there
+         NOTE: a copyright owner search didn't match anything
+         - libauthen-passphrase-perl <unfixable> (fork)
+         NOTE: perl implementation of phpass
+         - phpbb3 <unfixed>
+         NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
+ squirrelmail
+         - wordpress <unfixed> (embed)
+         NOTE: class-pop3.php
+ ezSQL (http://www.woyano.com/jv/ezsql)
+         - wordpress <unfixable> (fork)
+         NOTE: wp-db.php
+ Diff.php (Clay Loveless' version/killersoft.com)
+         - php-versioncontrol-svn <unfixed>
+ libm (provided by libc)
+         - spring <unfixed> (embed)
+         NOTE: embedded by embedded copy of streflop
+         - aide <unfixed> (static)
+         - busybox <unfixed> (static)
+         - mindi-busybox <unfixed> (static)
+         - qemu <unfixed> (static)
+         NOTE: qemu-user-static
+         - tuxonice-userui <unfixed> (static)
+         - zsh <unfixed> (static)
+         NOTE: zsh-static
+         - tripwire <unfixed>
+ streflop
+         - spring <unfixed> (embed)
+ minizip
+         - spring <unfixed> (embed)
+ oscpack
+         - spring <unfixed> (embed)
+ hpiutil2
+         - spring <unfixed> (embed)
+ p7zip
+         - spring <unfixed> (embed)
+ pythonqt (doesn't seem to be python-qtN, unknown source)
+         - fontmatrix <unfixed> (embed)
+         - elmerfem <unfixed> (embed)
+ iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
+         - docvert <unfixed> (embed)
+         - jifty <unfixed> (embed)
+         - kdenetwork <unfixed> (embed)
+         - mediatomb <unfixed> (embed)
+         - plastex <unfixed> (embed)
+         - plone3 <removed> (embed)
+         - python-chaco <unfixed> (embed)
+         - python-docutils <unfixed> (embed)
+         - s5 <unfixed> (embed)
+         - zope2.10 <unfixed> (embed)
+         - zope2.11 <removed> (embed)
+         - cython <not-affcted> (embed)
+         NOTE: part of documentation, which is not installed into the binary package
+ python-docutils
+         - zope2.10 <unfixed> (embed)
+         - zope2.11 <removed> (embed)
+ tesseract
+         - ocropus <unfixed> (static)
+ antlr
+         - kdevelop <unfixed> (embed)
+ libxerces2
+         - openjdk-6 <unfixed> (embed)
+ kfreebsd-8
+         - kfreebsd-7 <unfixed> (old-version)
+         - kfreebsd-6 <removed> (old-version)
+ ruby1.9.1
+         - ruby1.9 <unfixed> (old-version)
+         - ruby1.8 <unfixed> (old-version)
+ maildrop
+         - courier <unfixed> (embed) [./maildrop]
+ glee
+         - warzone2100 <not-affected> (embed)
+ phing
+         - symfony <unfixed> (embed)
+ pake
+         - symfony <unfixed> (embed)
+ propel
+         - symfony <unfixed> (embed)
+ creole
+         - symfony <unfixed> (embed)
+ hfsutils
+         - cdrkit <unfixed> (embed; bug #570187)
+         NOTE: embeds hfsutils code in genisoimage
+ cdrkit
+         - grub2 <unfixed> (embed; bug #570156)
+         NOTE: genisoimage imported into grub-mkisofs
+ kdebase-workspace
+         - kdebase <unfixed> (old-version)
+ file
+         - php5 <unfixable> (modified-embed)
+         [lenny] - php5 <not-affected>
+ cdb
+         - php5 <unfixed> (embed)
+ libmbfl (itp: #570708)
+         - php5 <unfixed> (embed)
+         NOTE: PHP is actually the current upstream, ITP is of that code
+ libonig
+         - php5 5.3.2-1 (embed)
+ xmlrpc-epi
+         - php5 <unfixed> (embed)
+ swt-gtk
+         - eclipse <unfixed> (embed; bug #538808)
+ txt2html
+         - wml 2.0.11ds2-1 (embed)
+ ca-certificates
+         - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
+ openexr
+         - freeimage <unfixed> (embed)
+ libmng
+         - freeimage <unfixed> (embed)
+ openjpeg
+         - freeimage <unfixed> (embed)
+ libjpeg6b
+         - freeimage <unfixed> (embed)
+         - ia32-libs <unfixable> (embed)
+ libjpeg (don't know what exact version)
+         - dcmtk <unfixed>
+         - gdcm <unfixed>
+         - insighttoolkit <unfixed>
+         - openarena 0.8.5-5+exp1 (bug #495966)
+         - outguess <unfixed>
+         - squeak-vm <unfixed> (embed)
+         - tremulous <unfixed>
+         - tuxonice-userui <unfixed> (static)
+         - fpc <unfixed> (static)
+         - lazarus <unfixed> (static)
+         NOTE: inherited from fpc, see #472304
+         - mseide-msegui <unfixed> (static)
+         NOTE: inherited from fpc, see #472304
+         - easymp3gain <unfixed> (static)
+         NOTE: inherited from fpc, see #472304
+         - winff <unfixed> (static)
+         NOTE: inherited from fpc, see #472304
+         - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
+ lxr
+         - lxr-cvs <unfixed> (embed)
+ libfile-copy-recursive-perl
+         - r-base <unfixed> (embed; bug #577427)
+         - r-base-core-ra <unfixed> (embed; bug #577429)
+ delimmatch
+         - r-base <unfixed> (embed; bug #577433)
+         - r-base-core-ra <unfixed> (embed; bug #577434)
+ libsmf (ITP: #572558)
+         - denemo <unfixed> (embed)
+         NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
+ libselinux
+         - dpkg 1.15.6 (static)
+         - ia32-libs <unfixable> (embed)
+ xinha (ITP: #479708)
+         - horde3 <unfixed>
+         - serendipity <unfixed>
+         - openacs <unfixed>
+         - dotlrn <unfixed>
+ dvipng
+         - texlive-bin <not-affected> (code present in source but not included in the binary packages)
+ dvipdfmx
+         - texlive-bin <unfixed> (embed)
+         NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
+ lcdf-typetools
+         - texlive-bin 2009-1 (embed)
+ tex4ht
+         - texlive-bin 2009-1 (embed)
+ freetype
+         - texlive-bin 2009-1 (embed)
+         - ia32-libs <unfixable> (embed)
+ freetype2
+         - texlive-bin 2009-1 (embed)
+         - tuxonice-userui <unfixed> (static)
+         - instantbird <unfixed>
+         - qt4-x11 <unknown> (embed)
+         - vtk <unknown> (embed)
+         - paraview <unknown> (embed)
+         NOTE: from embedded copy of vtk
+ silgraphite
+         - texlive-bin <unfixed> (embed)
+ unzip
+         - texlive-bin 2009-1 (embed)
+ jbig2dec
+         - ghostscript 8.71~dfsg2-1 (embed)
+ libxml2
+         - chromium-browser 5.0.375.29~r46008-1
+         - ia32-libs <unfixable> (embed)
+ protobuf
+         - chromium-browser 5.0.375.70~r48679-2
+ libv8
+         - chromium-browser 5.0.375.38~r46659-1
+ nspr
+         - chromium-browser 5.0.375.29~r46008-3
+         - ia32-libs <unfixable> (embed)
+ yasm
+         - chromium-browser 5.0.375.29~r46008-2
+ libxslt
+         - chromium-browser 5.0.375.29~r46008-1
+         - ia32-libs <unfixable> (embed)
+ miniupnpc (not packaged in Debian; ITP bug #444392)
+         - warzone2100 <unfixed> (embed)
+ iniparser (not packaged in Debian; RFP bug #582657)
+         - warzone2100 <unfixed> (modified-embed)
+ pyglet
+         - sympy <unfixed> (embed; bug #459716)
+ mpmath
+         - sympy <unfixed> (embed; bug #541746)
+ openssh
+         - libpam-ssh <unfixed> (embed; bug #598522)
+ curl
+         - cmake 2.6.0-6 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - criticalmass <unfixed> (static; bug #599061)
+         - wengophone 2.1.0~beta1-svn9983-1 (embed)
+         - ia32-libs <unfixable> (embed)
+ lib3ds
+         - boson <unfixed> (embed; bug #600900)
+         - openscenegraph <unfixed> (embed; bug #601181)
+ xcftools
+         - gnome-xcf-thumbnailer <unfixed> (embed)
+ simplejson
+         - exaile <unfixed> (embed; bug #604547)
+ libasycns
+         - loudmouth <unfixed> (embed; bug #566143)
+ plplot
+         - emboss <unfixed> (fork)
+ acl
+         - ia32-libs <unfixable> (embed)
+ arts
+         - ia32-libs <unfixable> (embed)
+ attr
+         - ia32-libs <unfixable> (embed)
+ audiofile
+         - ia32-libs <unfixable> (embed)
+ avahi
+         - ia32-libs <unfixable> (embed)
+ celt
+         - ia32-libs <unfixable> (embed)
+ coreutils
+         - ia32-libs <unfixable> (embed)
+ cyrus-sasl2
+         - ia32-libs <unfixable> (embed)
+ db4.8
+         - ia32-libs <unfixable> (embed)
+ dbus
+         - ia32-libs <unfixable> (embed)
+ directfb
+         - ia32-libs <unfixable> (embed)
+ esound
+         - ia32-libs <unfixable> (embed)
+ fltk1.1
+         - ia32-libs <unfixable> (embed)
+ fontconfig
+         - ia32-libs <unfixable> (embed)
+ freeglut
+         - ia32-libs <unfixable> (embed)
+ gcc-3.3
+         - ia32-libs <unfixable> (embed)
+ gdbm
+         - ia32-libs <unfixable> (embed)
+ gnutls26
+         - ia32-libs <unfixable> (embed)
+ hal
+         - ia32-libs <unfixable> (embed)
+ isdnutils
+         - ia32-libs <unfixable> (embed)
+ jack-audio-connection-kit
+         - ia32-libs <unfixable> (embed)
+ keyutils
+         - ia32-libs <unfixable> (embed)
+ krb5
+         - ia32-libs <unfixable> (embed)
+ lesstif2
+         - ia32-libs <unfixable> (embed)
+ libaio
+         - ia32-libs <unfixable> (embed)
+ libasyncns
+         - ia32-libs <unfixable> (embed)
+ libcap2
+         - ia32-libs <unfixable> (embed)
+ libdrm
+         - ia32-libs <unfixable> (embed)
+ libedit
+         - ia32-libs <unfixable> (embed)
+ libexif
+         - ia32-libs <unfixable> (embed)
+ libgcrypt11
+         - ia32-libs <unfixable> (embed)
+ libgpg-error
+         - ia32-libs <unfixable> (embed)
+ libgphoto2
+         - ia32-libs <unfixable> (embed)
+ libice
+         - ia32-libs <unfixable> (embed)
+ libieee1284
+         - ia32-libs <unfixable> (embed)
+ libjpeg8
+         - ia32-libs <unfixable> (embed)
+ libnss-ldap
+         - ia32-libs <unfixable> (embed)
+ libogg
+         - ia32-libs <unfixable> (embed)
+ libpam-ldap
+         - ia32-libs <unfixable> (embed)
+ libsamplerate
+         - ia32-libs <unfixable> (embed)
+ libsdl1.2
+         - ia32-libs <unfixable> (embed)
+ libsm
+         - ia32-libs <unfixable> (embed)
+ libssh2
+         - ia32-libs <unfixable> (embed)
+ libtasn1-3
+         - ia32-libs <unfixable> (embed)
+ libx11
+         - ia32-libs <unfixable> (embed)
+ libx86
+         - ia32-libs <unfixable> (embed)
+ libxau
+         - ia32-libs <unfixable> (embed)
+ libxcb
+         - ia32-libs <unfixable> (embed)
+ libxcomposite
+         - ia32-libs <unfixable> (embed)
+ libxcursor
+         - ia32-libs <unfixable> (embed)
+ libxdamage
+         - ia32-libs <unfixable> (embed)
+ libxdmcp
+         - ia32-libs <unfixable> (embed)
+ libxext
+         - ia32-libs <unfixable> (embed)
+ libxfixes
+         - ia32-libs <unfixable> (embed)
+ libxi
+         - ia32-libs <unfixable> (embed)
+ libxinerama
+         - ia32-libs <unfixable> (embed)
+ libxmu
+         - ia32-libs <unfixable> (embed)
+ libxp
+         - ia32-libs <unfixable> (embed)
+ libxrandr
+         - ia32-libs <unfixable> (embed)
+ libxrender
+         - ia32-libs <unfixable> (embed)
+ libxss
+         - ia32-libs <unfixable> (embed)
+ libxt
+         - ia32-libs <unfixable> (embed)
+ libxtst
+         - ia32-libs <unfixable> (embed)
+ libxv
+         - ia32-libs <unfixable> (embed)
+ libxxf86vm
+         - ia32-libs <unfixable> (embed)
+ lzo2
+         - ia32-libs <unfixable> (embed)
+ mesa
+         - ia32-libs <unfixable> (embed)
+ mpg123
+         - ia32-libs <unfixable> (embed)
+ nas
+         - ia32-libs <unfixable> (embed)
+ nss
+         - ia32-libs <unfixable> (embed)
+ openal-soft
+         - ia32-libs <unfixable> (embed)
+ openssl
+         - ia32-libs <unfixable> (embed)
+ pam
+         - ia32-libs <unfixable> (embed)
+ popt
+         - ia32-libs <unfixable> (embed)
+ pulseaudio
+         - ia32-libs <unfixable> (embed)
+ sane-backends
+         - ia32-libs <unfixable> (embed)
+ sqlite3
+         - ia32-libs <unfixable> (embed)
+         - chromium-browser <unfixed> (embed)
+ sysfsutils
+         - ia32-libs <unfixable> (embed)
+ tcp-wrappers
+         - ia32-libs <unfixable> (embed)
+ tdb
+         - ia32-libs <unfixable> (embed)
+ tslib
+         - ia32-libs <unfixable> (embed)
+ unixodbc
+         - ia32-libs <unfixable> (embed)
+ xaw3d
+         - ia32-libs <unfixable> (embed)
+ xbitmaps
+         - ia32-libs <unfixable> (embed)
+ xcb-util
+         - ia32-libs <unfixable> (embed)
+ xcursor-themes
+         - ia32-libs <unfixable> (embed)
+ xft
+         - ia32-libs <unfixable> (embed)
+ dicomparser
+         - vtk <unfixed>
+         - paraview <unfixed>
+         NOTE: as part of its copy of vtk
+         - insighttoolkit <unfixed>
+ proj
+         - vtk <unfixed>
+         - paraview <unfixed>
+         NOTE: as part of its copy of vtk
+         - therion <unfixed>
+         - python-pyproj 1.8.6-1
+ netcdf
+         - vtk <unfixed>
+         - paraview <unfixed>
+         NOTE: as part of its copy of vtk
+ insighttoolkit
+         - vtk <unfixed> (embed)
+         NOTE: embeds at least MetaIO
+         - paraview <unfixed> (embed)
+         NOTE: embeds at least MetaIO
+ gl2ps
+         - vtk <unfixed>
+         - paraview <unfixed>
+         NOTE: as part of its copy of vtk
+         - avogadro <unfixed>
+         - gabedit <unknown> (embed)
+         NOTE: not sure if it is built
+         - drawxtl <unfixed> (embed)
+         - rgl <unfixed> (embed)
+         - gmsh <unfixed>
+         - mcrl2 <unfixed> (embed)
+         - mysql-gui-tools <unknown> (embed)
+         NOTE: not sure if it is built
+         - opencascade <unfixed> (embed)
+         - orsa <unfixed> (embed)
+         - qtiplot <unfixed> (embed)
+         - qwtplot3d <unfixed> (embed)
+         - root-system <unknown> (embed)
+         NOTE: not sure if it is built
+         - scilab <unfixed> (embed)
+         - snd <unknown> (embed)
+         NOTE: not sure if it is built
+         - xmakemol <unfixed> (embed)
+ qwtplot3d
+         - qtiplot <unfixed>
+ parseafm (from Adobe)
+         - vftool <unfixed>
+         - gnustep-back <unknown>
+         NOTE: looks like it isn't built
+         - evince <unfixed>
+ bugzilla
+         - perl <unknown>
+         - libcgi-pm-perl <unknown>

 Legend:



Removed from v.13559
 


changed lines


 
Added in v.16072
 Legend:



Removed from v.13559
 


changed lines


 
Added in v.16072
-Removed from v.13559
+Added in v.16072

	ViewVC Help
Powered by ViewVC 1.1.5