| 28 |
|
|
| 29 |
Everything up to the next line is ignored. |
Everything up to the next line is ignored. |
| 30 |
---BEGIN |
---BEGIN |
| 31 |
xpdf (some srcpkgs use xpdf2 code, some xpdf3 code) |
poppler |
|
NOTE: Fixed packages link to poppler library unless otherwise noted |
|
| 32 |
- pdftohtml <unknown> |
- pdftohtml <unknown> |
| 33 |
[sarge] - pdftohtml <unfixed> |
[sarge] - pdftohtml <unfixed> |
| 34 |
[etch] - pdftohtml <unfixed> |
[etch] - pdftohtml <unfixed> |
| 44 |
- ruby-gnome2 <unknown> (embed) |
- ruby-gnome2 <unknown> (embed) |
| 45 |
- pdfedit <unfixed> (embed; bug #510794) |
- pdfedit <unfixed> (embed; bug #510794) |
| 46 |
- swftools <removed> (embed; bug #551293) |
- swftools <removed> (embed; bug #551293) |
| 47 |
- poppler <unfixable> (fork) |
- xpdf 3.02-9 (fork) |
| 48 |
|
|
| 49 |
|
pdksh (no longer developed since 1999) |
| 50 |
|
- mksh <unfixable> (fork) |
| 51 |
|
- posh <unfixable> (fork) |
| 52 |
|
|
| 53 |
ppmd |
ppmd |
| 54 |
- libcomplearn-mod-ppmd <unfixed> (fork) |
- libcomplearn-mod-ppmd <unfixed> (fork) |
| 85 |
|
|
| 86 |
dietlibc |
dietlibc |
| 87 |
- ccontrol 0.9.1+20071204-1 (static) |
- ccontrol 0.9.1+20071204-1 (static) |
| 88 |
|
- mksh <unfixable> (static) |
| 89 |
|
NOTE: /bin/mksh-static only, and only on some arches (others use eglibc) |
| 90 |
|
|
| 91 |
libmikmod |
libmikmod |
| 92 |
- sdl-mixer1.2 <unfixed> (embed) |
- sdl-mixer1.2 <unfixed> (embed) |
| 214 |
- openmotif <unfixed> (embed) |
- openmotif <unfixed> (embed) |
| 215 |
|
|
| 216 |
libxpm |
libxpm |
| 217 |
- lesstif <unfixed> (embed; bug #575750) |
- lesstif2 <unfixed> (embed; bug #575750) |
| 218 |
|
|
| 219 |
kerberized apps with BSD origin |
kerberized apps with BSD origin |
| 220 |
- krb4 <removed> (embed) |
- krb4 <removed> (embed) |
| 235 |
libbsd |
libbsd |
| 236 |
- rdate 1:1.2-3 (embed) |
- rdate 1:1.2-3 (embed) |
| 237 |
- atheme-services <unfixed> |
- atheme-services <unfixed> |
| 238 |
- libbsd-arc4random-perl <unfixed> |
- libbsd-arc4random-perl <not-affected> (modified-embed) |
| 239 |
|
NOTE: code not used, it links dynamically against libbsd instead |
| 240 |
- isakmpd <unfixed> |
- isakmpd <unfixed> |
| 241 |
- bsdgames <unfixed> (embed) |
- bsdgames <unfixed> (embed) |
| 242 |
- bsd-mailx <unfixed> (embed) |
- bsd-mailx <unfixed> (embed) |
| 243 |
- netcat-openbsd <unfixed> (embed; bug #550611) |
- netcat-openbsd <unfixed> (embed; bug #550611) |
| 244 |
- openssh <unfixed> (embed) |
- openssh <unfixed> (embed) |
| 245 |
- unworkable <unfixed> (embed) |
- unworkable <unfixed> (embed) |
| 246 |
|
- mksh <unfixed> (modified-embed) |
| 247 |
|
NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches |
| 248 |
|
NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed) |
| 249 |
|
NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused |
| 250 |
|
|
| 251 |
cvs |
cvs |
| 252 |
- gcvs <unfixed> (embed) |
- gcvs <unfixed> (embed) |
| 535 |
NOTE: evince-gtk is affected (a component of evince source package) |
NOTE: evince-gtk is affected (a component of evince source package) |
| 536 |
|
|
| 537 |
libXbae |
libXbae |
| 538 |
- paw <removed> (embed) |
- paw <unfixed> (embed) |
|
[etch] - paw <unfixed> (embed) |
|
| 539 |
|
|
| 540 |
libgtkhtml |
libgtkhtml |
| 541 |
- claws-mail-extra-plugins <unfixed> (fork) |
- claws-mail-extra-plugins <unfixed> (fork) |
| 542 |
|
|
| 543 |
libXaw |
libXaw |
| 544 |
- paw <removed> (embed) |
- paw <unfixed> (embed) |
|
[etch] - paw <unfixed> (embed) |
|
| 545 |
NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty |
NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty |
| 546 |
|
|
| 547 |
libgd2 |
libgd2 |
| 624 |
|
|
| 625 |
yassl |
yassl |
| 626 |
- mysql-dfsg-5.0 <unfixed> (embed) |
- mysql-dfsg-5.0 <unfixed> (embed) |
| 627 |
- mysql-dfsg-5.1 <unfixed> (embed) |
- mysql-5.1 <unfixed> (embed) |
| 628 |
|
|
| 629 |
pax code |
pax code |
| 630 |
- tar <unfixed> (embed) |
- tar <unfixed> (embed) |
| 710 |
- kde4libs <unfixable> (fork) |
- kde4libs <unfixable> (fork) |
| 711 |
NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems |
NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems |
| 712 |
NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs) |
NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs) |
| 713 |
|
- chromium-browser <unfixed> (fork) |
| 714 |
|
|
| 715 |
ftgl |
ftgl |
| 716 |
- blender 2.46+dfsg-1 (embed) |
- blender 2.46+dfsg-1 (embed) |
| 779 |
- libjson-ruby 1.1.4-1 (embed; bug #555224) |
- libjson-ruby 1.1.4-1 (embed; bug #555224) |
| 780 |
- lucene2 2.9.1+ds1-2 (embed; bug #555226) |
- lucene2 2.9.1+ds1-2 (embed; bug #555226) |
| 781 |
- horde3 <unfixed> (embed) |
- horde3 <unfixed> (embed) |
| 782 |
- knowledgeroot 0.9.9.5-1 (embed; bug #555230) |
- knowledgeroot 0.9.8.5-4 (embed; bug #555230) |
| 783 |
- mediatomb 0.12.0~svn2018-5 (embed; bug #555233) |
- mediatomb 0.12.0~svn2018-5 (embed; bug #555233) |
| 784 |
- mt-daapd 0.9~r1696.dfsg-6lenny2 (embed) |
- mt-daapd 0.9~r1696.dfsg-6lenny2 (embed) |
| 785 |
- ebug-http <removed> (embed; bug #555236) |
- ebug-http <unfixed> (embed; bug #555236) |
| 786 |
- libaws 2.7-1 (embed; bug #555222) |
- libaws 2.7-1 (embed; bug #555222) |
| 787 |
- phpgedview <removed> (embed) |
- phpgedview <removed> (embed) |
| 788 |
- poker-network 1.7.6-1 (embed; bug #555238) |
- poker-network 1.7.6-1 (embed; bug #555238) |
| 814 |
- libhtml-prototype-perl 1.48-3 (embed; bug #538920) |
- libhtml-prototype-perl 1.48-3 (embed; bug #538920) |
| 815 |
- xulrunner <unfixed> (embed) |
- xulrunner <unfixed> (embed) |
| 816 |
NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant |
NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant |
| 817 |
|
- jclicmoodle <unfixed> (embed) |
| 818 |
|
- git-cola <unfixed> (embed) |
| 819 |
|
|
| 820 |
gdb |
gdb |
| 821 |
- insight <unfixed> (embed) |
- insight <unfixed> (embed) |
| 859 |
NOTE: compressed file under examples/ dir |
NOTE: compressed file under examples/ dir |
| 860 |
- prewikka <unfixed> (embed) |
- prewikka <unfixed> (embed) |
| 861 |
- libramaze-ruby <unfixed> (embed) |
- libramaze-ruby <unfixed> (embed) |
| 862 |
- drupal5 <unfixed> (embed) |
- drupal6 <unfixed> (embed) |
| 863 |
- b2evolution <unfixed> (embed) |
- b2evolution <unfixed> (embed) |
| 864 |
- wesnoth <unfixed> (embed) |
- wesnoth <unfixed> (embed) |
| 865 |
|
|
| 916 |
- pixelpost 1.7.1-6 (embed) |
- pixelpost 1.7.1-6 (embed) |
| 917 |
|
|
| 918 |
php-openid |
php-openid |
| 919 |
- wordpress-openid <itp> (embed) |
- wordpress-openid 3.3.2-1 (embed) |
| 920 |
|
|
| 921 |
geshi |
geshi |
| 922 |
- dokuwiki 0.0.20080505-3.1 (embed) |
- dokuwiki 0.0.20080505-3.1 (embed) |
| 1011 |
[etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed) |
[etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed) |
| 1012 |
- gamera 3.2.3-1 (embed) |
- gamera 3.2.3-1 (embed) |
| 1013 |
- freeimage <unfixed> (embed) |
- freeimage <unfixed> (embed) |
| 1014 |
- tuxonice-userui (static) |
- tuxonice-userui <unfixed> (static) |
| 1015 |
|
|
| 1016 |
irssi |
irssi |
| 1017 |
- silc-client <unfixed> (embed) |
- silc-client <unfixed> (embed) |
| 1226 |
|
|
| 1227 |
eglibc |
eglibc |
| 1228 |
- glibc <removed> (old-version) |
- glibc <removed> (old-version) |
| 1229 |
|
- mksh <unfixable> (static) |
| 1230 |
|
NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc) |
| 1231 |
|
|
| 1232 |
galib |
galib |
| 1233 |
- gamera 3.2.3-1 (embed) |
- gamera 3.2.3-1 (embed) |
| 1309 |
NOTE: embeds stdlib modules: ConfigParser |
NOTE: embeds stdlib modules: ConfigParser |
| 1310 |
- museek+ <unfixed> (embed; bug #555428) |
- museek+ <unfixed> (embed; bug #555428) |
| 1311 |
NOTE: embeds stdlib modules: ConfigParser |
NOTE: embeds stdlib modules: ConfigParser |
| 1312 |
- vegastrike-data <unfixed> (embed) |
- vegastrike-data <removed> (embed) |
| 1313 |
NOTE: embeds many stdlib modules |
NOTE: embeds many stdlib modules |
| 1314 |
- codespeak-lib 1.1.1-1 (embed; bug #555420) |
- codespeak-lib 1.1.1-1 (embed; bug #555420) |
| 1315 |
NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap |
NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap |
| 1339 |
NOTE: embeds stdlib modules: uuid |
NOTE: embeds stdlib modules: uuid |
| 1340 |
- python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430) |
- python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430) |
| 1341 |
NOTE: embeds stdlib modules: uuid |
NOTE: embeds stdlib modules: uuid |
| 1342 |
- setroubleshoot <unfixed> (embed; bug #555431) |
- setroubleshoot <removed> (embed; bug #555431) |
| 1343 |
NOTE: embeds stdlib modules: uuid |
NOTE: embeds stdlib modules: uuid |
| 1344 |
- linkchecker <unfixed> (embed; bug #555414) |
- linkchecker <unfixed> (embed; bug #555414) |
| 1345 |
NOTE: embeds msgfmt.py script |
NOTE: embeds msgfmt.py script |
| 1506 |
NOTE: Text_Diff (wp-includes/Text/Diff*) |
NOTE: Text_Diff (wp-includes/Text/Diff*) |
| 1507 |
|
|
| 1508 |
cimg |
cimg |
| 1509 |
- gmic <itp> (embed) |
- gmic <unfixed> (embed) |
| 1510 |
|
|
| 1511 |
mootools |
mootools |
| 1512 |
- gmic <itp> (embed) |
- kdenetwork <unfixed> (embed) |
| 1513 |
|
- gallery <unfixed> (embed) |
| 1514 |
|
- jspwiki <unfixed> (embed) |
| 1515 |
|
- vdr-plugin-live <unfixed> (embed) |
| 1516 |
|
- perl-doc-html <unfixed> (embed) |
| 1517 |
|
|
| 1518 |
openldap |
openldap |
| 1519 |
- openldap2.3 <removed> (old-version) |
- openldap2.3 <removed> (old-version) |
| 1557 |
|
|
| 1558 |
dtoa |
dtoa |
| 1559 |
- bfilter <unfixed> (embed) |
- bfilter <unfixed> (embed) |
| 1560 |
- cacao <unfixed> (embed) |
- cacao <removed> (embed) |
| 1561 |
- cdrdao <unfixed> (embed) |
- cdrdao <unfixed> (embed) |
| 1562 |
- classpath <unfixed> (embed) |
- classpath <unfixed> (embed) |
| 1563 |
- freej <unfixed> (embed) |
- freej <unfixed> (embed) |
| 1743 |
- tuxonice-userui <unfixed> (static) |
- tuxonice-userui <unfixed> (static) |
| 1744 |
- zsh <unfixed> (static) |
- zsh <unfixed> (static) |
| 1745 |
NOTE: zsh-static |
NOTE: zsh-static |
| 1746 |
|
- tripwire <unfixed> |
| 1747 |
|
|
| 1748 |
streflop |
streflop |
| 1749 |
- spring <unfixed> (embed) |
- spring <unfixed> (embed) |
| 1804 |
- courier <unfixed> (embed) [./maildrop] |
- courier <unfixed> (embed) [./maildrop] |
| 1805 |
|
|
| 1806 |
glee |
glee |
| 1807 |
- warzone2100 <unfixed> (embed) |
- warzone2100 <not-affected> (embed) |
| 1808 |
|
|
| 1809 |
phing |
phing |
| 1810 |
- symfony <unfixed> (embed) |
- symfony <unfixed> (embed) |
| 1889 |
|
|
| 1890 |
|
|
| 1891 |
lxr |
lxr |
| 1892 |
- lxr-cvs (embed) |
- lxr-cvs <unfixed> (embed) |
| 1893 |
|
|
| 1894 |
libfile-copy-recursive-perl |
libfile-copy-recursive-perl |
| 1895 |
- r-base <unfixed> (embed; bug #577427) |
- r-base <unfixed> (embed; bug #577427) |
| 1957 |
|
|
| 1958 |
libxslt |
libxslt |
| 1959 |
- chromium-browser 5.0.375.29~r46008-1 |
- chromium-browser 5.0.375.29~r46008-1 |
| 1960 |
|
|
| 1961 |
|
miniupnpc (not packaged in Debian; ITP bug #444392) |
| 1962 |
|
- warzone2100 <unfixed> (embed) |
| 1963 |
|
|
| 1964 |
|
iniparser (not packaged in Debian; RFP bug #582657) |
| 1965 |
|
- warzone2100 <unfixed> (modified-embed) |
| 1966 |
|
|