/[secure-testing]/data/embedded-code-copies

Diff of /data/embedded-code-copies

Parent Directory | Revision Log | View Patch Patch

-revision 13183 by jwilk-guest,
Mon Nov  2 18:54:41 2009 UTC
+revision 14241 by jmm-guest,
Wed Mar 10 20:26:46 2010 UTC
 Line 15 
 status: version number fixing the embedd
          be determined, or <unfixable> for unavoidable cases (e.g., forks
          that add real value)
  sort: static (linking statically against a lib)
-       embed (embedding a copy of the library into another source package)
+       embed (embeds a copy of the library into another source package)
-       fork (the package is not just embedding code but it is a fork and
+       modified-embed (embeds a code copy that differs from upstream code)
-             thus might share parts of the source code)
+       fork (a full-blown fork of another source package)
-       old-version (the package is an older version of essentially
+       old-version (an older version of essentially the same code)
-                    the same code)
  The srcpkg might be some string to identify the code if there is no
  specific source package.
-Line 44 
 xpdf (some srcpkgs use xpdf2 code, some
+Line 43 
 xpdf (some srcpkgs use xpdf2 code, some
          - ruby-gnome2 <unknown> (embed)
          NOTE: copy only present in source but links to poppler
          - pdfedit <unfixed> (embed; bug #510794)
-         - swftools <unfixed> (embed; bug #551293)
+         - swftools <removed> (embed; bug #551293)
          - poppler <unfixable> (fork)
  ppmd
-Line 56 
 libevent
+Line 55 
 libevent
  lrmi
          - read-edid 2.0.0-1 (embed; bug #495131)
+         - s3switch <unfixed> (embed)
+         - xresprobe <unfixed> (embed)
+         - zhcon <unfixed> (embed)
  peercast
          - gnome-peercast <removed> (embed)
-Line 68 
 icclib
+Line 70 
 icclib
          - ghostscript <unfixed> (embed)
          - argyll <unfixed> (embed)
+ libusb
+         - argyll <unfixed> (embed)
  dietlibc
          - ccontrol 0.9.1+20071204-1 (static)
-Line 81 
 libiax
+Line 86 
 libiax
  spandsp
          - iaxmodem <unfixable> (embed; bug #548885)
+ python-paramiko
+         - fabric 0.9.0-2 (embed; bug #561398)
  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
-         - dpkg <unfixed> (embed)
+         - dpkg <unfixed> (static)
          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
          - rsync <unfixed> (embed)
+         - cherokee <unfixed> (embed)
          NOTE: somehow derived code base
          - mono <unfixed> (embed)
          TODO: check mozilla
-Line 111 
 zlib (lots of apps embed a copy, but lin
+Line 120 
 zlib (lots of apps embed a copy, but lin
          - plt-scheme <unfixed>
          - perl <unfixed>
          - paraview <unfixed>
+         - velvet 0.7.56~nozlibcopy-1
          - gcvs <unfixed>
          - dump <unfixed>
          - aide <unfixed> (static)
-Line 137 
 libvigraimpex
+Line 147 
 libvigraimpex
  libbz2
          - dpkg <unfixed> (static)
+ libyahoo2
+         - centerim <unfixed> (embed; bug #559783)
+ libmsn
+         - centerim <unfixed> (embed; bug #559783)
  libgadu
-         - centericq <unfixed> (embed)
+         - centerim <unfixed> (embed; bug #559783)
-         - pidgin <unfixed> (embed)
+         - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
-         NOTE: pidgin links dynamically against libgadu; that should be fixed, then???
+         - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
          - kdenetwork 4:3.3.2-5 (embed)
          NOTE: from kdenetwork: kopete
          - ekg 1:1.8~rc0-1 (embed)
-Line 159 
 shtool (affects build-time only)
+Line 175 
 shtool (affects build-time only)
          - mysql-ocaml <unfixed> (embed)
          - php4 <unfixed> (embed)
- iceape
+ xulrunner
-         - iceweasel <unfixed> (fork)
+         - iceape <unfixed> (embed; bug #561749)
-         - icedove <unfixed> (fork)
+         - iceweasel 2.0.0.19 (embed)
-         - xulrunner <unfixed> (fork)
+         - icedove <unfixed> (embed; bug #561750)
          - kompozer <unfixed> (embed; bug #532168)
+         - galeon 2.0.2-4 (embed)
+         - epiphany-browser 2.14.3-8 (embed)
+         - conkeror 0.9~git080629-2 (embed)
+         - kazehakase 0.4.2-1 (embed)
  xli
          - xloadimage <unfixed> (embed)
-Line 193 
 libbsd
+Line 213 
 libbsd
          - atheme-services <unfixed>
          - libbsd-arc4random-perl <unfixed>
          - isakmpd <unfixed>
+         - bsdgames <unfixed> (embed)
+         - bsd-mailx <unfixed> (embed)
+         - netcat-openbsd <unfixed> (embed; bug #550611)
+         - openssh <unfixed> (embed)
+         - unworkable <unfixed> (embed)
  cvs
          - gcvs <unfixed> (embed)
-Line 213 
 pcre3
+Line 238 
 pcre3
          - yacas <unfixed> (embed)
          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
          - gtamsanalyzer.app 0.42-5 (embed)
-         - tin <unknown> (embed)
+         - tin 980117-1 (embed)
          - kazehakase 0.5.2-1
          - webkit 1.0.1-1 (embed)
          - qt4-x11 <unfixed> (embed)
          NOTE: embedded via webkit copy
          - erlang <unfixed> (embed)
+         - ssed <unfixed> (embed)
  tiff
          - wxwindows2.4 2.2.1 (embed)
-Line 232 
 sqlite (not affected by security vulnera
+Line 258 
 sqlite (not affected by security vulnera
          - amarok <unfixed> (embed)
          - monotone 0.43-1 (embed)
          - iceweasel <unfixed> (embed)
+         - heimdal <unfixed> (embed; bug #559616)
  util-linux/mount
          - loop-aes-utils <unfixed> (embed)
-Line 261 
 ffmpeg (libavcodec/libavformat)
+Line 288 
 ffmpeg (libavcodec/libavformat)
          - gstreamer0.10-ffmpeg 0.10.3-2
          - xmovie <removed> (static)
          TODO: gimp-gap (potentially using ffmpeg code as well)
-         - avifile <unfixed> (embed; bug #538750)
+         - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
+         - audacity 1.3.7-2 (embed; bug #512278)
  faad2
          - mplayer 1.0~rc2-20 (embed)
          - avifile <unfixed> (embed; bug #538750)
+         - ffmpeg-debian <removed> (embed)
  libmad (MPEG decoding lib)
          - xine-lib <unfixed> (embed)
-         - avifile <unfixed> (embed) [./plugins/libmad/*]
+         - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
          TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
  libdts
-Line 300 
 imagemagick
+Line 329 
 imagemagick
  python-urlgrabber
          - mercurial <unfixed> (embed; bug #531062)
-         - w3af <unfixed> (embed)
+         - w3af <unfixed> (embed; bug #555372)
-         [experimental] - harvestman <unfixed> (embed)
+         [experimental] - harvestman <unfixed> (embed; bug #555373)
  beautifulsoup
-         - python-mechanize <unfixed> (embed)
+         - python-mechanize <unfixed> (embed; bug #555349)
-         - zope2.11 <unfixed> (embed)
+         - zope2.11 <removed> (embed; bug #555350)
          - twill <unknown> (embed)
  halibut
-Line 339 
 fckeditor
+Line 368 
 fckeditor
          - karrigell <removed> (embed; bug #452598)
          - gforge 4.6.99+svn6225-1 (embed)
          - request-tracker3.8 <unfixed> (embed)
+         - otrs2 <unfixed> (embed)
  ipatlas (not packaged in Debian)
          - moodle <unfixed> (embed; bug #507185)
-Line 346 
 ipatlas (not packaged in Debian)
+Line 376 
 ipatlas (not packaged in Debian)
  libphp-phpmailer
          - moodle <unfixed> (embed; bug #507185)
          - mahara <unfixed> (embed)
-         - symfony <unfixed> (embed)
+         - symfony <unfixed> (embed; bug #566778)
          [etch] - phpgroupware <unfixed> (embed)
          NOTE: phpgroupware-felamimail is only in etch
          - egroupware <unfixed> (embed; bug #504283)
-Line 397 
 libphp-adodb
+Line 427 
 libphp-adodb
          - mahara <unfixed> (embed)
  gzip
-         - linux-kernel <unfixed> (embed)
+         - linux-2.6 <unfixed> (embed) [lib/inflate.c]
-         NOTE: lib/inflate.c
          - klibc <unfixed> (embed)
          NOTE: based on linux-kernel gzip code
          - busybox <unfixed> (embed)
+         - pristine-tar <unfixed> (modified-embed)
+         NOTE: compression code only, not uncompression
  neon
          - cadaver 0.22.3+debian-1 (embed; bug #188381)
-Line 409 
 neon
+Line 440 
 neon
          [etch] - litmus <unfixed> (embed; #395875)
          - litmus <removed> (embed; #395875)
          [sarge] - screem <unfixed> (embed)
-         - sitecopy 1:0.16.3-5 (embed; bug #395876)
+         - sitecopy 1:0.16.0-1 (embed; bug #395876)
          [etch] - tla <unfixed> (embed; bug #395877)
          [sarge] - tla <unfixed> (embed; bug #395877)
  libmodplug
-         - gst-plugins-bad0.10 <unfixed> (embed)
+         - gst-plugins-bad0.10 0.10.10.2-1 (embed)
  libvncserver
          - vino <unfixed> (embed)
-Line 422 
 libvncserver
+Line 453 
 libvncserver
  putty
          - filezilla <unfixed> (embed)
- tinyxml (not packaged in Debian)
+ tinyxml (not packaged in Debian; itp bug #531968)
          - filezilla <unfixed>
+         - crystalspace <unfixed> (embed)
+         - libwfut <unfixed> (embed)
+         - rarian <unfixed> (embed)
+         - bulletml <unfixed> (embed)
+         - pokerth <unfixed> (embed)
+         - qutecom <unfixed> (embed)
+         - sofa-framework <unfixed> (embed)
+         - yate <unfixed> (embed)
+         - antigrav <unfixed> (embed)
+         - balder2d <unfixed> (embed)
+         - cal3d <unfixed> (embed)
+         - criticalmass <unfixed> (embed)
+         - ember <unfixed> (embed)
+         - epiphany <unfixed> (embed)
+         - gambit <unfixed> (embed)
+         - noiz2sa <unfixed> (embed)
+         - ogre <unfixed> (embed)
+         - opencity <unfixed> (embed)
+         - openmovieeditor <unfixed> (embed)
+         - pouetchess <unfixed> (embed)
+         - tecnoballz <unfixed> (embed)
+         - trigger-rally <unfixed> (embed)
+         - xmoto <unfixed> (embed)
+         - mapnik <unknown> (embed)
+         NOTE: uses a different XML parser by default
+         - rrootage 0.23a-6 <embed>
+         NOTE: links to libbulltetml
+         - boson <unknown> (embed)
+         NOTE: the embedded code is unused
  gv
          - evince <unfixed> (embed)
-Line 477 
 librpcsecgss
+Line 537 
 librpcsecgss
          - krb5 <unfixed> (embed)
  jasper
-         - ghostscript <unfixed> (embed)
+         - ghostscript 8.64~dfsg-2 (embed)
-         - gs-gpl <unfixed> (embed)
  libiris
          - psi <unfixed> (embed)
-Line 494 
 libidn
+Line 553 
 libidn
          - kdegames <unfixed> (embed)
          NOTE: kdegames/kde4 embeds libiris which embeds libidn
- liblua
+ lua5.1
          - monotone 0.43-1 (embed)
          - nmap 5.00-1 (embed; bug #527997)
          [lenny] - nmap <unfixed> (embed; bug #527997)
+         - ocropus <unfixed> (embed)
+         - enigma <unfixed> (embed)
+         NOTE: requires lua built with C++
+         - freeciv <unfixed> (embed)
+         - spring <unfixed> (embed)
  libbotan
          - monotone 0.43-1 (embed)
-Line 517 
 lzo
+Line 581 
 lzo
  yassl
          - mysql-dfsg-5.0 <unfixed> (embed)
+         - mysql-dfsg-5.1 <unfixed> (embed)
  pax code
          - tar <unfixed> (embed)
-Line 533 
 guichan
+Line 598 
 guichan
  tolua
          - boswars <unfixed> (embed)
          NOTE: maintainer notified us, working on it
+         NOTE: actually tolua++
+         - ocropus <unfixed> (embed)
+         NOTE: actually tolua++
+         - freeciv <unfixed> (embed)
+         NOTE: actually tolua++
+         - enigma <unfixed> (embed)
  asio-dev
          - luxrender <removed> (embed)
-Line 568 
 fribidi
+Line 639 
 fribidi
  glew
          - quesoglc <unfixed> (embed; bug #489341)
          NOTE: waiting on GLEW_MX version of glew (see bug #474488)
+         - trigger <unfixed> (embed)
+         NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
+         - trigger-rally <unfixed> (embed)
+         NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
          - transcend <unfixed> (embed)
-Line 583 
 cpio
+Line 658 
 cpio
          - libarchive <unfixed> (embed)
          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
+ kde4libs
+         - kdelibs <unfixable> (old-version)
  webkit
-         - qt4-x11 <unfixed> (embed)
+         - qt4-x11 <unfixed> (embed; bug #479851)
+         [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
+         - kde4libs <unfixable> (fork)
+         NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
+         NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
  ftgl
          - blender 2.46+dfsg-1 (embed)
-Line 594 
 wv
+Line 676 
 wv
  qemu
          - kvm <unfixed> (embed; bug #543159)
-         - xen-3 <unfixed> (embed)
+         NOTE: the kvm package will be removed from sid and squeeze soon (after
-         - xen-unstable <unfixed> (embed)
+         NOTE: which it will only be in experimental). superceded by qemu-kvm.
+         - qemu-kvm <unfixed> (embed; bug #560853)
+         - xen-3 3.4.2-2 (embed; bug #560856)
+         - xen-unstable <unfixed> (embed; bug #560856)
  vgabios
          - kvm <unfixed> (embed; bug #489442)
-Line 609 
 speex
+Line 694 
 speex
          - gst-plugins-good0.10 <unfixed> (embed)
          - xine-lib <unfixed> (embed)
          - libfishsound <unfixed> (embed)
-         - libannodex <unfixed> (embed)
+         - libannodex <removed> (embed)
          - vlc <unfixed> (embed)
          - xmms-speex <unfixed> (embed)
          - libsdl-sound1.2 <unfixed> (embed)
-Line 633 
 mochikit
+Line 718 
 mochikit
          NOTE: they require extra patches, still unmerged upstream
          - ntop <unfixed> (embed)
          - coherence 0.6.2-1 (embed)
-         NOTE: python-coherence
          - paste <unfixed> (embed)
-         NOTE: python-paste
          - turbogears <unfixed> (embed)
-         NOTE: python-turbogears
+         - plone3 <removed> (embed)
-         - plone3 <unfixed> (embed)
+         - xulrunner <unfixed> (embed)
-         NOTE: zope-plone3
+         - libjifty-plugin-chart-perl <unfixed> (embed)
+         - sabnzbdplus <unfixed> (embed)
+         - tgmochikit <unfixed> (embed)
  prototypejs
          - netbeans-ide 6.0.1+dfsg-2 (embed)
-         - auth2db <unfixed> (embed)
+         - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
-         - webcit <unfixed> (embed)
+         - webcit <unfixed> (embed; bug #555219)
-         NOTE: citadel-webcit
+         - asterisk 1:1.6.2.0~rc3-1 (embed)
-         - asterisk <unfixed> (embed)
+         - libjson-ruby 1.1.4-1 (embed; bug #555224)
-         - doc-iana <unfixed> (embed)
+         - lucene2 2.9.1+ds1-2 (embed; bug #555226)
-         - libaws <unfixed> (embed)
+         - horde3 <unfixed> (embed)
-         NOTE: libaws-doc
+         - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
-         - libgettext-ruby <unfixed> (embed)
+         - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
-         NOTE: libgettext-ruby-data
+         - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
-         - libjson-ruby <unfixed> (embed)
+         - ebug-http <removed> (embed; bug #555236)
-         NOTE: libjson-ruby-doc
+         - libaws 2.7-1 (embed; bug #555222)
-         - lucene2 <unfixed> (embed)
-         NOTE: liblucene2-java-doc
-         - libopenid-ruby <unfixed> (embed)
-         - solr <unfixed> (embed)
-         NOTE: solr-common
-         - glpi <unfixed> (embed)
-         - mnemo2 <unfixed> (embed)
-         - nag2 <unfixed> (embed)
-         - knowledgeroot <unfixed> (embed)
-         - mediatomb <unfixed> (embed)
-         NOTE: mediatomb-common
-         - mt-daapd <unfixed> (embed)
-         - op-panel <unfixed> (embed)
-         - ebug-http <unfixed> (embed)
          - phpgedview <removed> (embed)
-         - poker-network <unfixed> (embed)
+         - poker-network 1.7.6-1 (embed; bug #555238)
-         NOTE: poker-web
+         - rails 2.1.0-6 (embed)
-         - webhelpers <unfixed> (embed)
+         - wordpress 2.5.0-2 (embed; bug #555243)
-         NOTE: python-webhelpers
+         - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
-         - qwik <unfixed> (embed)
+         TODO: search through all of the other zope packages
-         - rails <unfixed> (embed)
-         - typo3-src <unfixed> (embed)
-         - wordpress 2.5.0-2 (embed)
-         - zope <unfixed> (embed)
-         NOTE: zope-plone3
-         - smokeping <unfixed> (embed)
          - ampache 3.4.1-2 (embed)
-         - exaile <unfixed> (embed)
+         - exaile 0.2.14+debian-2.1 (embed; bug #555245)
-         - hobix <unfixed> (embed)
+         - hobix 0.5~svn20070319-4 (embed; bug #555247)
-         - pixelpost <unfixed> (embed)
+         - zabbix 1.6.6-4 (embed; bug #555250)
-         - symfony <unfixed> (embed)
+         - chora2 <unfixed> (embed; bug #555253)
-         NOTE: it's been said that there are custom changes
+         - gollem <unfixed> (embed; bug # 555254)
-         - zabbix <unfixed> (embed)
+         - jscropperui 1.2.1-1 (embed; bug #555257)
-         NOTE: zabbix-frontend-php
+         - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
-         - turba2 <unfixed> (embed)
+         - ingo1 1.2.3+debian0-1 (embed; bug #555261)
+         - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
+         - activeldap <unfixed> (embed)
+         - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
+         - mantis 1.1.2+dfsg-1 (embed; bug #555265)
+         - otrs2 2.3.4-6 (embed; bug #555267)
+         - webcalendar 1.2~b1-2 (embed; bug #555269)
+         - redmine 0.9.0~svn2907-1 (embed; bug #555270)
+         - jifty 0.90519-1 (embed; bug #555271)
+         - jquery 1.4-1 (embed; bug #555272)
+         - passenger 2.2.5debian1-1 (embed; bug #555273)
+         - plone3 <removed> (embed; bug #555275)
+         - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
+         - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
+         - xulrunner <unfixed> (embed)
+         NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
  gdb
          - insight <unfixed> (embed)
-Line 711 
 java
+Line 791 
 java
  libphp-snoopy
          - ampache 3.4.1-2 (embed; bug #504169)
+         - gforge 4.6.99+svn6094-2 (embed)
          - mahara 1.0.5-2 (embed; bug #504170)
          - pixelpost 1.7.1-5 (embed; bug #504171)
          - mediamate 0.9.3.6-5 (embed; bug #504172)
-Line 751 
 magpierss
+Line 832 
 magpierss
  php-gettext
          - wordpress 2.8.4-1 (embed; bug #504242)
+         - docbookwiki <unfixed> (embed)
+         - knowledgeroot 0.9.9.5-1
+         NOTE: non-free
  libphp-ixr (name may change, it is the Incutio XML-RPC)
          - wordpress <unfixed> (embed; bug #504242)
-Line 762 
 libphp-cas
+Line 846 
 libphp-cas
          - glpi <unfixed> (embed)
          - moodle <unfixed> (embed; bug #505984)
- scriptaculous
+ scriptaculous (prototype.js is among the embeds in the following)
          - glpi <unfixed> (embed)
-         - libaws <unfixed> (embed)
+         - libaws <unfixed> (embed; bug #555222)
-         NOTE: libaws-doc
          - op-panel <unfixed> (embed)
          - symfony <unfixed> (embed)
          NOTE: maintainer says there are extra incompatible changes required
-         - pixelpost <unfixed> (embed)
+         - pixelpost 1.7.1-6 (embed)
          - webhelpers <unfixed> (embed)
-         NOTE: python-webhelpers
+         - qwik <removed> (embed; bug #555241)
-         - qwik <unfixed> (embed)
          - smokeping <unfixed> (embed)
          - turba2 <unfixed> (embed)
          - typo3-src 4.2.3-1 (embed)
+         - request-tracker3.6 <unfixed> (embed)
+         - request-tracker3.8 <unfixed> (embed)
+         - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
+         - wordpress 2.5.0-2 (embed)
+         - libhtml-prototype-perl 1.48-3 (embed)
  libmarkdown-php
          - moodle <unfixed> (embed; bug #507185)
-         - pixelpost <unfixed> (embed)
+         - pixelpost 1.7.1-6 (embed)
  php-openid
          - wordpress-openid <itp> (embed)
-Line 793 
 webcalendar
+Line 880 
 webcalendar
          - gforge 4.7~rc2-6 (embed; bug #504758)
  libical
-         - kdepim <unfixed> (fork)
+         - kdepim <unknown> (fork)
-         - kdepimlibs <unfixed> (fork)
+         NOTE: fixed at some point during 4.0
-         NOTE: fixed in KDE4 post 4.1.x series
+         - kdepimlibs 4.2.0-1 (fork)
          - claws-mail-extra-plugins <unfixed> (fork)
- libltdl3
-         - kdelibs <unfixed> (embed)
-         NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
-         - synfig <unfixed> (embed)
  harfbuzz
          - qt4-x11 <unfixed> (embed)
+         - pango1.0 <unfixed> (embed)
+         - fontmatrix <unfixed> (embed)
  libzip
-         - php5 <unfixed> (fork)
+         - php5 <unfixable> (modified-embed)
          - odt2txt <unfixed> (embed; bug #523808)
  json.php (not packaged; should be replaced with php's built-in functions)
-Line 850 
 rssparser (http://nwow.org)
+Line 934 
 rssparser (http://nwow.org)
  lcms
          - openjdk-6 <unfixed> (fork)
+         - gimp 2.4.0~rc2-2
  libphp-phplayersmenu
          - diogenes <unfixed>
-Line 862 
 libphp-pclzip
+Line 947 
 libphp-pclzip
  libphp-simplepie
          - dokuwiki <unfixed>
+         - wordpress <unfixed>
  libphp-jpgraph
          - egroupware <unfixed>
-Line 894 
 libitext-java
+Line 980 
 libitext-java
          - bouncycastle 2.1.4-1 (embed)
  python-ply
-         - pyke <unfixed> (embed)
+         - pyke <unfixed> (embed; bug #555363)
+         - pywbem 0.7.0-4 (embed; bug #555364)
+         - sepolgen <unfixed> (embed; bug #555365)
+         - zope-textindexng3 <unknown> (embed)
+         - iceweasel <not-affected> (uses xulrunner)
+         - xulrunner <unknown> (embed)
+         - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
  libdumbnet (libdnet upstream)
          - nmap <unfixed> (fork)
-Line 912 
 yajl
+Line 1004 
 yajl
          - argyll <unfixed> (embed; bug #544223)
          NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
+ nusoap
+         - gforge 4.8.2-1 (embed)
+         - ampache <unfixed> (embed)
+         - poker-network <unfixed> (embed)
+         - moodle <unfixed> (embed)
+         NOTE: code is not used when running under php5 and soap is enabled
+         - phpwiki <unfixed> (embed)
+         - gallery2 <unfixed> (embed)
+         - typo3-src <unfixed> (embed)
  libept
          - adept <unfixed> (embed; bug #540649)
  libvorbis
          - iceweasel <not-affected> (uses xulrunner)
-         - xulrunner <not-affected> (introduced in 1.9.1)
+         - xulrunner <unfixed> (embed; bug #540959)
-         TODO: recheck when xulrunner 1.9.1 enters unstable [- xulrunner <unfixed> (embed; bug #540959)]
+         [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
+         [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed)
+         [etch] - iceape <not-affected> (introduced in 2.0)
+         [lenny] - iceape <not-affected> (introduced in 2.0)
  cairo
          - iceweasel <not-affected> (uses xulrunner)
          - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
+ liboggz
+         - iceweasel <not-affected> (uses xulrunner)
+         - xulrunner <unfixed> (embed; bug #540959)
+         [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
+         [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed)
+         [etch] - iceape <not-affected> (introduced in 2.0)
+         [lenny] - iceape <not-affected> (introduced in 2.0)
+ liboggplay
+         - iceweasel <not-affected> (uses xulrunner)
+         - xulrunner <unfixed> (embed; bug #540959)
+         [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
+         [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed)
+         [etch] - iceape <not-affected> (introduced in 2.0)
+         [lenny] - iceape <not-affected> (introduced in 2.0)
  php-net-dnsbl
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740)
  php-onyx-rss
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740)
  php-text-wiki
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740)
  php-xml-rpc
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740)
  polarssl (does not have a shared library)
          - pdkim <itp> (embed; bug #543150)
          - xyssl <unfixed> (old-version)
- pidgin
+ pidgin (libpurple)
          - gaim <removed> (old-version)
+         - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
  icu
          - webkit 1.0.1-1 (embed; bug #547214)
-Line 953 
 cyrus-imapd-2.2
+Line 1078 
 cyrus-imapd-2.2
          - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
  python-cxx-dev
-         - freecad <unfixed> (embed; bug #547936)
+         - freecad 0.9.2646.3-1 (embed; bug #547936)
- libzipios++-dev
+ zipios++
-         - freecad <unfixed> (embed; bug #547941)
+         - freecad 0.9.2646.3-1 (embed; bug #547941)
+         - enigma 0.92.3-3 (embed)
+         NOTE: likely fixed earlier, marking etch's version as fixed
  linux-2.6
-         - kvm <unfixed> (embed; bug #549973) [./kernel/*]
+         - kvm <removed> (embed; bug #549973) [./kernel/*]
          - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
          - kernel-source-2.6.8 <removed> (old-version)
          - kernel-source-2.4.27 <removed> (old-version)
-Line 968 
 linux-2.6
+Line 1095 
 linux-2.6
          - kernel-source-2.2.20 <removed> (old-version)
  libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
-         - kvm <unfixed> (embed) [./libfdt/*]
+         - kvm <removed> (embed) [./libfdt/*]
+         - qemu-kvm <unfixed> (embed) [./libfdt/*]
  qweb (not packaged)
          - ajaxterm <unfixed>
-Line 986 
 expat
+Line 1114 
 expat
          - w3c-libwww <removed> (embed; bug #551941)
          [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
          - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
-         - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
+         - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
-         - python2.4 <unfixed> (embed; bug #553403)
+         - python2.4 <unfixable> (embed; bug #553403)
+         - python-4suite <unfixed> (embed; bug #516935)
          - wxwindows2.4 <removed> (embed)
-         - wxwidgets2.6 <unfixed> (embed)
+         - wxwidgets2.6 2.6.3.2.2-4 (embed)
-         - wxwidgets2.8 <unfixed> (embed)
+         - wxwidgets2.8 2.8.10.1-2 (embed)
-         - celementtree <unfixed> (embed)
+         - celementtree 1.0.5-8 (embed)
-         - audacity <unfixed> (embed)
+         NOTE: Maybe that was fixed even earlier
+         - audacity 1.3.2-1 (embed)
          - matanza <unfixed> (embed)
-         - tdom <unfixed> (embed)
+         - tdom 0.8.3~20080525-1 (embed)
-         - udunits <unfixed> (embed)
+         - udunits 2.1.8-4 (embed)
-         - apr-util <unfixed> (embed)
+         - apr-util 1.2 (embed)
-         - ayttm <unfixed> (embed)
+         - ayttm <unfxed> (embed; bug #561006)
          - cableswig <unfixed> (embed)
          - cadaver <unfixed> (embed)
-         - cmake <unfixed> (embed)
+         - cmake 2.6.0-6 (embed)
          - coin3 <unfixed> (embed)
-         - gdcm <unfixed> (embed)
+         - gdcm 2.0.14-2 (embed)
-         - ghostscript <unfixed> (embed)
+         - ghostscript 8.71~dfsg-2 (embed)
-         - grmonitor <unfixed> (embed)
+         - grmonitor <removed> (embed)
          - iceape <unfixed> (embed)
-         - insighttoolkit <unfixed> (embed)
+         - insighttoolkit 3.16.0-1 (embed)
-         - libparagui1.1 <unfixed> (embed)
+         NOTE: insighttoolkit might've been fixed earlier
-         - paraview <unfixed> (embed)
+         - libparagui1.1 1.0.2-1 (embed)
-         - poco <unfixed> (embed)
+         - paraview 3.6.2-1 (embed)
+         - poco 1.3.6p1-1 (embed)
          - simgear <unfixed> (embed)
-         - sitecopy <unfixed> (embed)
+         - sitecopy 1:0.16.0-1
-         - smart 1.0-1 (embed)
+         - smart <unfixed> (embed)
-         [etch] - smart <unfixed> (embed)
+         NOTE: smart embeds celementree, and it includes expat
-         - swish-e <unfixed> (embed)
+         - swish-e <not-affected> (Linked against libxml, which is used instead)
-         - tla <unfixed> (embed)
+         - tla 1.3.5+dfsg-15 (embed)
-         - vtk <unfixed> (embed)
+         - vtk 4.1.20030227-1 (embed)
-         - wbxml2 <unfixed> (embed)
+         - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
          - xmlrpc-c <unfixed> (embed)
          - iceweasel <unfixed> (embed)
          - kompozer <unfixed> (embed)
-         - vxl <unfixed> (embed)
+         - vxl 1.13.0-2 (embed)
          - xulrunner <unfixed> (embed)
-         - apache2 <unfixed> (embed)
+         - apache2 2.2 (embed)
-         - texlive-bin <unfixed> (embed) [included twice]
+         - texlive-bin <not-affected> (Embedded code not compiled in)
          - vnc4 <unfixed> (embed)
          - xotcl <unfixed> (embed)
-Line 1036 
 md5 (RSA's version; not the gnu version
+Line 1167 
 md5 (RSA's version; not the gnu version
          - w3c-libwww <removed> (embed; bug #551942)
          [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
+ libparagui1.1
+         - asc <unfixable> (fork)
  enet
          - sauerbraten <unfixed> (embed; #497194)
-Line 1046 
 galib
+Line 1180 
 galib
          - gamera 3.2.3-1 (embed)
  configobj
-         - bzr <unfixed> (embed)
+         - bzr 2.1.0~rc2-1 (embed; bug #555336)
-         - elisa <unfixed> (embed)
+         - elisa <unfixed> (embed; bug #555337)
-         - gaupol <unfixed> (embed)
+         - gaupol <unfixed> (embed; bug #555338)
-         - ipython <unfixed> (embed)
+         - ipython <unfixed> (embed; bug #555339)
-         - pida <unfixed> (embed)
+         - pida <unfixed> (embed; bug #555340)
-         - psychopy <unfixed> (embed)
+         - psychopy <unfixed> (embed; bug #555341)
-         - rest2web <unfixed> (embed)
+         - rest2web <unfixed> (embed; bug #555342)
          - auth2db <unknown> (embed)
          - dynagen <unknown> (embed)
          - iceweasel <unknown> (embed)
          - sabnzbdplus <unknown> (embed)
          - xulrunner <unknown> (embed)
-         - nipy <not-affected> (embed) [./examples/neurospin/neurospy/configobj.py]
+         - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
  python-clientform
-         - bibus <unfixed> (embed)
+         - bibus <unfixed> (embed; bug #555332)
-         - zope2.10 <unfixed> (embed)
+         - zope2.10 <unfixed> (embed; bug #555333)
-         - zope2.11 <unfixed> (embed)
+         - zope2.11 <removed> (embed; bug #555334)
          - python-mechanize <unknown> (embed)
          - twill <unknown> (embed)
  python-mechanize
-         - zope2.10 <unfixed> (embed)
+         - zope2.10 <unfixed> (embed; bug #555337)
-         - zope2.11 <unfixed> (embed)
+         - zope2.11 <removed> (embed; bug #555338)
-         - twill <unknown> (embed)
+         - twill <unknown> (embed; bug #555339)
  pexpect
-         - duplicity <unfixed> (embed)
+         - duplicity 0.6.06-1 (embed; bug #555361)
-         - hplip <unfixed> (embed)
+         - hplip <unfixed> (embed; bug #555362)
-         - smart <unfixed> (embed)
+         - smart <unfixed> (embed; bug #555363)
  pyparsing
-         - bauble <unfixed> (embed)
+         - bauble <unfixed> (embed; bug #555366)
-         - boa-constructor <unfixed> (embed)
+         - boa-constructor 0.6.1-8 (embed; bug #555367)
-         - calibre <unfixed> (embed)
+         - calibre <unfixed> (embed; bug #555368)
-         - matplotlib <unfixed> (embed)
+         - matplotlib <unfixed> (embed; bug #531024)
-         - zhpy <unfixed> (embed)
+         - zhpy 1.7.3.1-1 (embed; bug #555370)
          - polybori <unknown> (embed)
          - python-whoosh <unknown> (embed)
          - twill <unknown> (embed)
-Line 1094 
 python-pysqlite2
+Line 1228 
 python-pysqlite2
  celementtree
          - python2.5 <unfixed> (embed)
-         - smart 1.0-1 (embed)
+         - smart <unfixed> (embed)
-         [etch] - smart <unfixed> (embed)
  elementtree
          - python2.5 <unfixed> (embed)
-         - bzr <unfixed> (embed)
+         - python2.6 <unfixed> (embed)
-         - gedit <unfixed> (embed)
+         - bzr 2.1.0~rc2-1 (embed; bug #555343)
-         - smart 1.0-1 (embed)
+         - gedit 2.28.2-1 (embed; bug #555344)
-         [etch] - smart <unfixed> (embed)
+         - smart <unfixed> (embed)
-         - solfege <unfixed> (embed)
+         - solfege <unfixed> (embed; bug #555345)
-         - w3af <unfixed> (embed)
+         - w3af <unfixed> (embed; bug #555346)
          - python-qt4 <unknown> (embed)
          - sphinx <unknown> (embed)
          - python-nltk <itp> (embed)
-Line 1113 
 python2.5
+Line 1246 
 python2.5
          - python2.4 <unfixed> (old-version)
          - jython <unfixed> (embed)
          NOTE: embeds many stdlib modules
-         - python-django <unfixed> (embed)
+         - python-django <unfixed> (embed; bug #555419)
-         NOTE: emebeds stdlib modules: doctest, decimal
+         NOTE: embeds stdlib modules: doctest, decimal
          - gamera 3.2.3-1 (embed)
          NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
-         - boa-constructor <unfixed> (embed)
+         - boa-constructor <unfixed> (embed; bug #555426)
-         NOTE: embeds stdlib modules: ConfigParser
+         NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
-         - nicotine <unfixed> (embed)
+         - nicotine <unfixed> (embed; bug #555427)
          NOTE: embeds stdlib modules: ConfigParser
-         - museek+ <unfixed> (embed)
+         - museek+ <unfixed> (embed; bug #555428)
          NOTE: embeds stdlib modules: ConfigParser
          - vegastrike-data <unfixed> (embed)
          NOTE: embeds many stdlib modules
-         - codespeak-lib <unfixed> (embed)
+         - codespeak-lib 1.1.1-1 (embed; bug #555420)
          NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
-         - config-manager <unfixed> (embed)
+         - config-manager <unfixed> (embed; bug #555423)
          NOTE: embeds stdlib modules: optparse
-         - jhbuild <unfixed> (embed)
+         - jhbuild 2.28.0-1 (embed; bug #555421)
          NOTE: embeds stdlib modules: optparse, subprocess
-         - smart <unfixed> (embed)
+         - smart <unfixed> (embed; bug #555432)
          NOTE: embeds stdlib modules: optparse
-         - pyprotocols <unfixed> (embed)
+         - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
          NOTE: embeds stdlib modules: doctest
-         - ruledispatch <unfixed> (embed)
+         - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
          NOTE: embeds stdlib modules: doctest
          - distribute <unfixed> (embed)
          NOTE: embeds stdlib modules: doctest
-         - python-setuptools <unfixed> (embed)
+         - python-setuptools <unfixed> (embed; bug #555435)
          NOTE: embeds stdlib modules: doctest
-         - zope.testing <unfixed> (embed)
+         - zope.testing <unfixed> (embed; bug #555436)
          NOTE: embeds stdlib modules: doctest
-         - translate-toolkit <unfixed> (embed)
+         - translate-toolkit <unfixed> (embed; bug #555422)
          NOTE: embeds stdlib modules: textwrap, contextlib
-         - libtpclient-py <unfixed> (embed)
+         - libtpclient-py <unfixed> (embed; bug #555424)
          NOTE: embeds stdlib modules: subprocess
-         - grass <unfixed> (embed)
+         - grass <unfixed> (embed; bug #555425)
          NOTE: embeds stdlib modules: subprocess
-         - coherence <unfixed> (embed)
+         - coherence <unfixed> (embed; bug #555429)
          NOTE: embeds stdlib modules: uuid
-         - python-django-extensions <unfixed> (embed)
+         - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
          NOTE: embeds stdlib modules: uuid
-         - setroubleshoot <unfixed> (embed)
+         - setroubleshoot <unfixed> (embed; bug #555431)
          NOTE: embeds stdlib modules: uuid
-         - linkchecker <unfixed> (embed)
+         - linkchecker <unfixed> (embed; bug #555414)
          NOTE: embeds msgfmt.py script
          - imdbpy <unfixed> (embed)
          NOTE: embeds msgfmt.py script
          - kiwi <unfixed> (embed)
          NOTE: embeds msgfmt.py script
          - moin <unfixed> (embed)
-         NOTE: embeds msgfmt.py script
+         NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
-         - plone3 <unfixed> (embed)
+         - plone3 <removed> (embed)
          NOTE: embeds msgfmt.py script
          - roundup <unfixed> (embed)
-         NOTE: embeds msgfmt.py script
+         NOTE: embeds msgfmt.py script, stdlib modules: cgitb
-         - rednotebook <unfixed> (embed)
+         - rednotebook <unfixed> (embed; bug #555415)
          NOTE: embeds msgfmt.py script
          - turbogears <unfixed> (embed)
          NOTE: embeds msgfmt.py script
          - elisa <unfixed> (embed)
          NOTE: embeds msgfmt.py script, stdlib modules: uuid
          - calibre <unfixed> (embed)
-         NOTE: embeds msgfmt.py script
+         NOTE: embeds msgfmt.py script, stdlib modules: zipfile
-         - mailman <unfixed> (embed)
+         - mailman 1:2.1.13-1 (embed; #555416)
          NOTE: embeds msgfmt.py script
          - python-docutils <unknown> (embed)
          NOTE: embeds stdlib modules: optparse, textwrap
-Line 1207 
 python2.5
+Line 1340 
 python2.5
          NOTE: embeds msgfmt.py script
          - python-formencode <unknown> (embed)
          NOTE: embeds msgfmt.py script
+         - duplicity <unfixed> (embed)
+         NOTE: embeds stdlib module: urlparse, tarfile
+         - pygopherd <unfixed> (embed)
+         NOTE: embeds stdlib module: zipfile
  argparse
-         - twill <unfixed> (embed)
+         - twill <unfixed> (embed; bug #555347)
-         - ipython <unfixed> (embed)
+         - ipython <unfixed> (embed; bug #555348)
  coherence
-         - elisa <unfixed> (embed)
+         - elisa <unfixed> (embed; bug #555335)
  simpletal
-         - plastex <unfixed> (embed)
+         - plastex <unfixed> (embed; bug #555371)
  flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
          - postr <unfixed> (embed)
-Line 1229 
 simplegeneric (not packaged in Debian, h
+Line 1366 
 simplegeneric (not packaged in Debian, h
  distribute
          - setuptools <removed> (old-version)
+ rails
+         - jruby1.2 <unfixed> (embed) [./bench/rails/*]
+         - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
+         - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
+         - thin <unfixed> (embed) [./spec/rails_app/*]
+         NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
+         NOTE: be dangerous if developers are naively basing their code off of the examples
+         NOTE: prototype.js is among the example files
+ lucene2 (prototype.js is among the embeds in the following)
+         - lucene <unfixed> (old-version)
+         - pylucene <unfixed> (embed)
+         - libpdfbox-java <unfixed> (embed)
+         - libfontbox-java <unfixed> (embed)
+         - libjempbox-java <unfixed> (embed)
+         - solr <unfixed> (embed)
+ unicode-data
+         - syslinux <unfixed> (embed)
+         - camomile <unfixed> (embed)
+         - fribidi <unfixed> (embed)
+         - m17n-db <unfixed> (embed)
+         - sbcl <unfixed> (embed)
+         - heimdal <unfixed> (embed)
+         - icu <unfixed> (embed)
+         - icu4j <unfixed> (embed)
+         - krb5 <unfixed> (embed)
+         - moodle <unfixed> (embed)
+         - openldap <unfixed> (embed)
+         - pike7.6 <unfixed> (embed)
+         - samba <unfixed> (embed)
+         - samba4 <unfixed> (embed)
+         - cmucl <unfixed> (embed)
+         - typo3-src <unfixed> (embed)
+         - mauve <unfixed> (embed)
+         - texlive-bin <unfixed> (embed)
+         - ypsilon <unfixed> (embed)
+         - jeuclid <unfixed> (embed)
+         - charmap.app <unfixed> (embed)
+         - clisp <unfixed> (embed)
+         - gnulib <unfixed> (embed)
+         - opensrs-client <unfixed> (embed)
+         - saxonb <unfixed> (embed)
+         - rails <unfixed> (embed)
+ feedparser
+         - rawdog <unfixed> (embed; bug #383422)
+         - miro <unfixed> (embed; bug #555351)
+         - calibre <unfixed> (embed; bug #555352)
+         - freevo <unfixed> (embed; bug #555353)
+         - pida <unfixed> (embed; bug #555354)
+         - planet-venus <unfixed> (embed; bug #555355)
+         - plone3 <removed> (embed; bug #555356)
+         - exaile 0.2.14+debian-1 (embed)
+         - screenlets 0.1.2-3 (embed)
+         NOTE: included twice
+ agg:
+         - matplotlib <unfixed> (embed: bug #377271)
+         - contextfree <unfixed> (embed)
+         NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
+         - exactimage <unfixed> (embed)
+         - python-enable <unfixed> (embed)
+         - mapnik 0.5.1-3 (embed)
+         NOTE: links statically to agg, but shared library is not available (bug #377271)
+ vtk
+         - paraview <unfixable> (embed; bug #495426)
+ txt2tags
+         - rednotebook <unfixed> (embed)
+ htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
+         - gajim <unfixed> (embed)
+         - emesene <unfixed> (embed)
+         - convirt <unfixed> (embed)
+         - pida <unfixed> (embed)
+         - rednotebook <unfixed> (embed)
+ horde3 (prototype.js is among the embeds in the following)
+         - mnemo2 <unfixed> (embed)
+         - nag2 <unfixed> (embed)
+         - wordpress <unfixed> (embed)
+         NOTE: Text_Diff (wp-includes/Text/Diff*)
+ cimg
+         - gmic <itp> (embed)
+ mootools
+         - gmic <itp> (embed)
+ openldap
+         - openldap2.3 <removed> (old-version)
+ grub2
+         - grub <unfixed> (old-version)
+ gnupginterface
+         - duplicity <unfixed> (embed)
+ python-dateutil
+         - awn-extras-applets <unfixed> (embed)
+         - matplotlib <unknown> (embed)
+ cups
+         - cupsys <removed> (old-version)
+ yui
+         - bcfg2 <not-affected> (present in source but not included in any binary files)
+         - serendipity <unfixed> (embed; bug #557746)
+         - moodle 1.8.2.dfsg-5 (embed)
+         - jifty 0.91117-1 (embed; bug #557748)
+         - webgui 7.7.26-1 (embed)
+         - loggerhead 1.17-1 (embed)
+ quake3 (vanilla source not packaged in debian)
+         - openarena <unfixable> (fork)
+ quake2 (vanilla source not packaged in debian)
+         - alien-arena <unfixable> (fork)
+         - warsow <unfixable> (fork)
+ libtheora
+         - iceweasel <not-affected> (uses xulrunner)
+         - xulrunner <unfixed> (embed; bug #540959)
+         [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
+         [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
+         - iceape <unfixed> (embed; bug #559276)
+         [etch] - iceape <not-affected> (introduced in iceape 2.0)
+         [lenny] - iceape <not-affected> (introduced in iceape 2.0)
+ dtoa
+         - bfilter <unfixed> (embed)
+         - cacao <unfixed> (embed)
+         - cdrdao <unfixed> (embed)
+         - classpath <unfixed> (embed)
+         - freej <unfixed> (embed)
+         - iceape <unfixed> (embed)
+         - iceweasel <unfixed> (embed)
+         - jscoverage <unfixed> (embed)
+         - kde4libs <unfixed> (embed)
+         - kdelibs <unfixed> (embed)
+         - kompozer <unfixed> (embed)
+         - libv8 <unfixed> (embed)
+         - mono <unfixed> (embed)
+         - newlib <unfixed> (embed)
+         - nspr <unfixed> (embed)
+         - php5 <unfixed> (embed)
+         - polyml <unfixed> (embed)
+         - qt4-x11 <unfixed> (embed)
+         - rhino <unfixed> (embed)
+         NOTE: code translated to Java
+         - ruby1.8 <unfixed> (embed)
+         - ruby1.9 <unfixed> (embed)
+         - ruby1.9.1 <unfixed> (embed)
+         - sdd <unfixed> (embed)
+         - sfind <unfixed> (embed)
+         - star <unfixed> (embed)
+         - tinymux <unfixed> (embed)
+         - virtualbox-ose <unfixed> (embed)
+         - webkit <unfixed> (embed)
+         - xulrunner <unfixed> (embed)
+ ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
+         - firegpg <unfixed> (embed)
+         - enigmail <unfixed> (embed)
+ ptmalloc (not packaged in Debian)
+         - crystalspace <unfixed> (embed)
+         - qt4-x11 <unfixed> (embed)
+ svgalib
+         - usplash <unfixed> (embed)
+ bogl
+         - usplash <unfixed> (embed)
+ taglist
+         - usplash <unfixed> (embed)
+ portaudio
+         - audacity <unfixed> (embed; bug #323711)
+ nyquist
+         - audacity <unfixed> (embed)
+         NOTE: embeds a forked nyquist with support for a shared library
+ vamp-plugin-sdk
+         - audacity <unfixed> (embed)
+ wordpress
+         - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
+         - wordpress-mu <unfixed> (fork)
+ php5
+         - php4 <removed> (old-version)
+ classpath
+         - libgnucrypto-java <removed> (embed; bug #559788)
+ libtool
+         - apr <unfixed> (static; bug #489625)
+         NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
+         - arts <unfixed> (embed)
+         - bochs 2.4.2-1 (embed; bug #560884)
+         - camserv <unfixed> (embed)
+         - collectd 4.8.2-1 (embed)
+         - courier-authlib 0.58-4 (embed)
+         NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
+         - cvsnt 2.5.04.3236-1.2 (embed)
+         - dico <not-affected> (Uses the system copy of ltdl)
+         - freeradius 0.1+20010527-1 (embed)
+         NOTE: Earliest reference I could find from the changelog is from 27 May 2001
+         - ggobi 2.1.9~20091212-1 (embed)
+         - glame 2.0.1-4 (embed)
+         NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
+         - gnash 0.8.7-2 (embed)
+         - gnu-smalltalk <unfixed> (embed; bug #566777)
+         - google-gadgets 0.10.5-0.3 (embed)
+         NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
+         - graphicsmagick 1.3.5-6 (embed)
+         - graphviz 2.8-3 (embed)
+         NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
+         - guile-1.6 1.6.8-7 (embed)
+         - hamlib <unfixed> (embed)
+         - hercules 3.06-1.2 (embed)
+         - jags 1.0.4-3 (embed; bug #560864)
+         - kdelibs <unfixed> (embed)
+         - libannodex <removed> (embed)
+         - libextractor 0.5.23+dfsg-4 (embed)
+         - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
+         - libtunepimp 0.5.3-7.3 (embed)
+         - mp4h 1.3.1-4.1 (embed)
+         - naim <removed> (embed)
+         - parser-mysql <unfixed> (embed)
+         - pinball 0.3.1-11 (embed)
+         - redland <unfixed> (embed)
+         - siproxd <unfixed> (embed)
+         - ski <unfixed> (embed)
+         - synfig 0.62.00-1 (embed)
+         - unixodbc 2.2.4-5 (embed)
+         - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
+         - clamav 0.95+dfsg-1 (embed)
+         - imagemagick 6:6.2.3.1-1 (embed)
+         - hypre 2.4.0b-5 (embed)
+         - lam <unfixed> (embed)
+         - openmpi <unfixable> (embed; bug #559386)
+         - parser <unfixed> (embed)
+         - pdsh 2.18-5 (embed; bug #560892)
+         - sbnc 1.2-8 (embed)
+         - sdcc <unfixed> (embed)
+         - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
+         - proftpd-dfsg <unfixed> (embed; bug #561748)
+         - babel 1.4.0.dfsg-5 (embed)
+         - libprelude 0.9.14-2 (embed)
+         - heartbeat 2.1.4-7 (embed)
+         NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
+         NOTE: might've been fixed earlier
+         - gcc-* <unknown> (embed)
+ ocamlgsl
+         - orpie 1.5.1-7.1 (embed; bug #550058)
+ xdotool
+         - keynav <unfixed> (embed; bug #560103)
+ bulletphysics (not packaged; http://www.bulletphysics.org/)
+         - supertuxkart <unfixed> (embed)
+         - blender <unfixed> (embed)
+ ghostscript
+         - gs-gpl <removed> (old-version)
+ icedove
+         - thunderbird <removed> (old-version)
+ sizzlejs (not packaged in Debian, http://sizzlejs.com/)
+         - jquery <unfixed> (embed)
+ sed
+         - ssed <unfixed> (fork)
+ phpatomlib (http://code.google.com/p/phpatomlib)
+         - wordpress <unfixed> (embed)
+ Services_JSON (http://pear.php.net/package/Services_JSON)
+         - wordpress <unfixed> (embed)
+ phpass (http://www.openwall.com/phpass/)
+         - gallery2 <unfixed> (embed)
+         - wordpress <unfixed> (embed)
+         - typo3-src <unfixed> (modified-embed)
+         NOTE: file refers to drupal, maybe there's a copy somewhere there
+         NOTE: a copyright owner search didn't match anything
+         - libauthen-passphrase-perl <unfixable> (fork)
+         NOTE: perl implementation of phpass
+ squirrelmail
+         - wordpress <unfixed> (embed)
+         NOTE: class-pop3.php
+ ezSQL (http://www.woyano.com/jv/ezsql)
+         - wordpress <unfixable> (fork)
+         NOTE: wp-db.php
+ Diff.php (Clay Loveless' version/killersoft.com)
+         - php-versioncontrol-svn <unfixed>
+ libm
+         - spring <unfixed> (embed)
+         NOTE: embedded by embedded copy of streflop
+ streflop
+         - spring <unfixed> (embed)
+ minizip
+         - spring <unfixed> (embed)
+ oscpack
+         - spring <unfixed> (embed)
+ hpiutil2
+         - spring <unfixed> (embed)
+ p7zip
+         - spring <unfixed> (embed)
+ pythonqt (doesn't seem to be python-qtN, unknown source)
+         - fontmatrix <unfixed> (embed)
+         - elmerfem <unfixed> (embed)
+ iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
+         - docvert <unfixed> (embed)
+         - jifty <unfixed> (embed)
+         - kdenetwork <unfixed> (embed)
+         - mediatomb <unfixed> (embed)
+         - plastex <unfixed> (embed)
+         - plone3 <removed> (embed)
+         - python-chaco <unfixed> (embed)
+         - python-docutils <unfixed> (embed)
+         - s5 <unfixed> (embed)
+         - zope2.10 <unfixed> (embed)
+         - zope2.11 <removed> (embed)
+         - cython <not-affcted> (embed)
+         NOTE: part of documentation, which is not installed into the binary package
+ python-docutils
+         - zope2.10 <unfixed> (embed)
+         - zope2.11 <removed> (embed)
+ tesseract
+         - ocropus <unfixed> (static)
+ antlr
+         - kdevelop <unfixed> (embed)
+ libxerces2
+         - openjdk-6 <unfixed> (embed)
+ kfreebsd-8
+         - kfreebsd-7 <unfixed> (old-version)
+         - kfreebsd-6 <removed> (old-version)
+ ruby1.9.1
+         - ruby1.9 <unfixed> (old-version)
+         - ruby1.8 <unfixed> (old-version)
+ maildrop
+         - courier <unfixed> (embed) [./maildrop]
+ glee
+         - warzone2100 <unfixed> (embed)
+ phing
+         - symfony <unfixed> (embed)
+ pake
+         - symfony <unfixed> (embed)
+ propel
+         - symfony <unfixed> (embed)
+ creole
+         - symfony <unfixed> (embed)
+ hfsutils
+         - cdrkit <unfixed> (embed; bug #570187)
+         NOTE: embeds hfsutils code in genisoimage
+ cdrkit
+         - grub2 <unfixed> (embed; bug #570156)
+         NOTE: genisoimage imported into grub-mkisofs
+ kdebase-workspace
+         - kdebase <unfixed> (old-version)

 Legend:



Removed from v.13183
 


changed lines


 
Added in v.14241
 Legend:



Removed from v.13183
 


changed lines


 
Added in v.14241
-Removed from v.13183
+Added in v.14241

	ViewVC Help
Powered by ViewVC 1.1.5