/[secure-testing]/data/embedded-code-copies

Diff of /data/embedded-code-copies

Parent Directory | Revision Log | View Patch Patch

-revision 15007 by nion,
Tue Jul 20 18:07:11 2010 UTC
+revision 18637 by pabs,
Sun Mar 11 07:44:21 2012 UTC
 Line 12 
 Format:
  status: version number fixing the embedded copy
          <unfixed> if the issue is not yet fixed
          <removed> if the package was removed from the archive
          <itp> if the package is in the process of being packaged
          <not-affected> if the package does not use the embedded copy
          <unknown> if the version number can not be determined
          <unfixable> for unavoidable cases (e.g., forks that add real value)
  sort: static (linking statically against a lib)
        embed (embeds a copy of the library into another source package)
        modified-embed (embeds a code copy that differs from upstream code)
 Line 28 
 specific source package.
  Everything up to the next line is ignored.
  ---BEGIN
- xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
+ poppler
-         NOTE: Fixed packages link to poppler library unless otherwise noted
          - pdftohtml <unknown>
          [sarge] - pdftohtml <unfixed>
          [etch] - pdftohtml <unfixed>
-Line 45 
 xpdf (some srcpkgs use xpdf2 code, some
+Line 44 
 xpdf (some srcpkgs use xpdf2 code, some
          - ruby-gnome2 <unknown> (embed)
          - pdfedit <unfixed> (embed; bug #510794)
          - swftools <removed> (embed; bug #551293)
-         - poppler <unfixable> (fork)
+         - xpdf 3.02-9 (fork)
  pdksh (no longer developed since 1999)
          - mksh <unfixable> (fork)
-Line 58 
 ppmd
+Line 57 
 ppmd
  libevent
          - transmission 1.71-1 (embed; bug #529372)
          - chromium-browser 5.0.375.29~r46008-1
+         - dnsproxy <unknown> (embed)
  lrmi
          - read-edid 2.0.0-1 (embed; bug #495131)
 Line 67 
 lrmi
  php-htmlpurifier
          - mahara 1.2.5-1 (embed)
-         - knowledgeroot <unfixed> (embed)
+         - knowledgeroot 0.9.9.5-5 (embed)
          - moodle <unfixed> (embed)
  peercast
 Line 83 
 icclib
  libusb
          - argyll <unfixed> (embed)
+         - ia32-libs <unfixable> (embed)
  dietlibc
          - ccontrol 0.9.1+20071204-1 (static)
-Line 90 
 dietlibc
+Line 91 
 dietlibc
          NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
  libmikmod
+         - pysol-sound-server <unfixed> (modified-embed)
          - sdl-mixer1.2 <unfixed> (embed)
          TODO: report bug
+         - uqm 0.6.2.dfsg-8 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - black-box 1.4.6-2.2 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
  libiax
          - iaxmodem <unfixable> (embed; bug #548885)
-Line 110 
 zlib (lots of apps embed a copy, but lin
+Line 116 
 zlib (lots of apps embed a copy, but lin
          NOTE: somehow derived code base
          - mono <unfixed> (embed)
          TODO: check mozilla
-         - Linux kernels <unfixed> (embed)
+         - linux-2.6 <unfixed> (embed)
          - pvpgn 1.7.8-2 (embed)
          - mrtg 2.12.2-1 (embed)
          - rpm <unknown> (embed)
-Line 126 
 zlib (lots of apps embed a copy, but lin
+Line 132 
 zlib (lots of apps embed a copy, but lin
          - mirrordir <unfixed>
          - poco <unfixed>
          - klibc <unfixed>
-         - emboss <unfixed>
+         - emboss 6.3.1-1 (embed)
-         - ghostscript <unfixed>
+         - ghostscript 8.71~dfsg2-6 (embed)
+         NOTE: ghostscript fixed sometime before this, but this is the version i checked
          - freeimage <unfixed>
          - clamav <unfixed> (fork)
          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
-Line 151 
 zlib (lots of apps embed a copy, but lin
+Line 158 
 zlib (lots of apps embed a copy, but lin
          - python2.4 <unfixed> (embed; bug #553403)
          - python2.5 <unfixed> (embed; bug #553403)
          - texlive-bin <unknown> (embed)
+         - sudo <unknown> (embed)
+         NOTE: source package embeds zlib but it isn't built and doesn't seem to be used anyway
  dulwich
          - hg-git 0.1.0-1 (embed; bug #541996)
-Line 166 
 libbz2
+Line 175 
 libbz2
          NOTE: let's call it "static"
          - dar <unfixed> (static)
          - dump <unfixed> (static)
-         - unalz <unfixed> (embed)
+         - unalz 0.64-1 (embed)
          NOTE: has code, by the maint, to use the system version but links against the internal copy
+         - clamav <unfixed> (embed)
+         NOTE: libclamav/nsis/bzlib*
+         - pristine-tar <unfixable> (modified-embed)
+         NOTE: compression code only, not uncompression
+         - r-base-core-ra 1.2.8 (static)
+         - r-base-core 2.11.1 (static)
+         NOTE: links dynamically in squeeze, statically in lenny
+         - rpm <unfixed> (static)
+         NOTE: lsb-rpm package is statically linked, normal rpm links dynamically
  libyahoo2
          - centerim <unfixed> (embed; bug #559783)
-Line 215 
 lesstif (beware: two different lesstif A
+Line 233 
 lesstif (beware: two different lesstif A
          - openmotif <unfixed> (embed)
  libxpm
-         - lesstif <unfixed> (embed; bug #575750)
+         - lesstif2 <unfixed> (embed; bug #575750)
+         - ia32-libs <unfixable> (embed)
  kerberized apps with BSD origin
          - krb4 <removed> (embed)
-Line 246 
 libbsd
+Line 265 
 libbsd
          - unworkable <unfixed> (embed)
          - mksh <unfixed> (modified-embed)
          NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
-         - mksh <not-affected> (modified-embed)
+         NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
          NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
+         - ia32-libs <unfixable> (embed)
  cvs
          - gcvs <unfixed> (embed)
-Line 256 
 cvs
+Line 276 
 cvs
  pcre3
          - php4 <removed> (embed)
          - analog 2:5.23-0woody1 (embed)
+         - chicken 3.2.7-2 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - goffice <unfixed> (embed)
          NOTE: libgoffice-*
+         - hypermail 2.2.0.dfsg-2 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - privoxy 3.0.9-1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - vfu 4.06-4.1 (embed; bug #450754)
          - tf5 5.0beta7-1 (embed)
          - monotone 0.43-1 (embed)
-Line 276 
 pcre3
+Line 302 
 pcre3
          - erlang <unfixed> (embed)
          - ssed <unfixed> (embed)
          - ircd-hybrid <unfixed> (static)
-         - emboss <unfixd>
+         - emboss <unfixed> (fork)
          - cherokee <unfixed> (embed)
-         - oftc-hybrid <unfixed> (embed)
+         - oftc-hybrid 1.6.9.dfsg-1 (embed)
          - ratbox-services <unfixed> (embed)
          - squeak-vm <unfixed> (embed)
          - tinymux <unfixed> (embed)
-Line 290 
 tiff
+Line 316 
 tiff
          - libtk-img <unfixed> (embed)
          NOTE: there are two copies, one under tiff/ other under libtiff/
          - gdal <unfixed>
+         - ia32-libs <unfixable> (embed)
  uudeview
          - libconvert-uulib-perl <unfixed> (embed)
          - pan <unfixed> (embed)
- sqlite (not affected by security vulnerabilities so far)
+ sqlite
          - amarok <unfixed> (embed)
          - monotone 0.43-1 (embed)
          - iceweasel <unfixed> (embed)
          - heimdal <unfixed> (embed; bug #559616)
- util-linux/mount
+ util-linux
          - loop-aes-utils <unfixed> (embed)
          NOTE: contains code from util-linux' mount in the mount-aes-udeb
+         - ia32-libs <unfixable> (embed)
  sylpheed
          - sylpheed-claws <unfixed> (fork)
-Line 332 
 ffmpeg (libavcodec/libavformat)
+Line 360 
 ffmpeg (libavcodec/libavformat)
          - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
          - audacity 1.3.7-2 (embed; bug #512278)
          - chromium-browser <unfixed> (fork)
+         - libav <unfixed>
  faad2
          - mplayer 1.0~rc2-20 (embed)
-Line 348 
 libdts
+Line 377 
 libdts
  flac
          - xine-lib <unfixed> (embed)
+         - ia32-libs <unfixable> (embed)
  liba52
          - a52dec <unfixed> (embed)
-Line 389 
 libghttp
+Line 419 
 libghttp
  libsndfile
          - ardour 1:2.7.1-1 (embed)
+         - ia32-libs <unfixable> (embed)
  glibmm2.4
          - ardour 1:2.7.1-1 (embed)
-Line 398 
 libgnomecanvasmm2.6
+Line 429 
 libgnomecanvasmm2.6
  libsigc++-2.0
          - ardour 1:2.7.1-1 (embed)
+         - ia32-libs <unfixable> (embed)
  soundtouch
          - ardour 1:2.7.1-1 (embed)
-Line 412 
 fckeditor
+Line 444 
 fckeditor
          - karrigell <removed> (embed; bug #452598)
          - gforge 4.6.99+svn6225-1 (embed)
          - request-tracker3.8 <unfixed> (embed)
          - otrs2 <unfixed> (embed)
  ipatlas (not packaged in Debian)
          - moodle <unfixed> (embed; bug #507185)
-Line 446 
 TinyMCE
+Line 478 
 TinyMCE
          - moodle <unfixed> (embed; bug #507185)
          - knowledgeroot <unfixed> (embed)
          - joomla <itp> (bug #326398)
+         - mahara 1.2.6-1 (embed; #597752)
  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
          - scite <unfixed> (embed)
-Line 453 
 scintilla (upstream provides static lib,
+Line 486 
 scintilla (upstream provides static lib,
          - qscintilla2 <unfixed> (embed)
          - geany <unfixed> (fork)
          - anjuta <unfixed> (embed)
+         - sdlbasic <unfixed> (embed)
  libphp-adodb
          - moodle <unfixed> (embed; bug #507185)
-Line 498 
 libvncserver
+Line 532 
 libvncserver
  putty
          - filezilla <unfixed> (embed)
- tinyxml (not packaged in Debian; itp bug #531968)
+ tinyxml
          - filezilla <unfixed>
          - crystalspace <unfixed> (embed)
          - libwfut <unfixed> (embed)
-Line 529 
 tinyxml (not packaged in Debian; itp bug
+Line 563 
 tinyxml (not packaged in Debian; itp bug
          NOTE: links to libbulltetml
          - boson <unknown> (embed)
          NOTE: the embedded code is unused
+         - cppcheck <unfixed> (embed)
+         NOTE: introduced in 1.47, will use system's version in 1.48
+         [squeeze] - cppcheck <not-affected>
  gv
          - evince <unfixed> (embed)
-Line 536 
 gv
+Line 573 
 gv
          NOTE: evince-gtk is affected (a component of evince source package)
  libXbae
-         - paw <removed> (embed)
+         - paw <unfixed> (embed)
-         [etch] - paw <unfixed> (embed)
  libgtkhtml
          - claws-mail-extra-plugins <unfixed> (fork)
  libXaw
-         - paw <removed> (embed)
+         - paw <unfixed> (embed)
-         [etch] - paw <unfixed> (embed)
          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
+         - ia32-libs <unfixable> (embed)
  libgd2
-         - graphviz <unfixed> (embed)
+         - graphviz 2.16-1 (embed)
          NOTE: lib/gd seems to be 2.0.33
          - wml 2.0.11ds2-1 (embed)
          - libwmf <unfixed> (embed)
-         NOTE: derived from gd 1.6.3
+         NOTE: derived from gd 1.6.3, but only used to write images
+         - plt-scheme <unfixed> (embed; bug #601525)
          - texlive-bin 2009-1 (embed)
  rar
-Line 598 
 libidn
+Line 635 
 libidn
          NOTE: psi embeds libiris which embeds libidn
          - kdegames <unfixed> (embed)
          NOTE: kdegames/kde4 embeds libiris which embeds libidn
+         - ia32-libs <unfixable> (embed)
  lua5.1
          - monotone 0.43-1 (embed)
-Line 621 
 libgc
+Line 659 
 libgc
  lzma
          - p7zip <unfixed> (embed)
          - xz-utils <unfixed> (fork)
+         - r-base <unfixed> (embed)
+         NOTE: lzma support not yet in lenny or in r-base-core-ra 1.2.8
  lzo
          - grub2 <unfixed> (embed)
  yassl
          - mysql-dfsg-5.0 <unfixed> (embed)
-         - mysql-dfsg-5.1 <unfixed> (embed)
+         - mysql-5.1 <unfixed> (embed)
  pax code
          - tar <unfixed> (embed)
-Line 636 
 pax code
+Line 676 
 pax code
  t1lib
          - tetex-bin 2.0.2-1 (embed)
          - texlive-bin <unknown> (embed)
+         - grace 5.1.14-2 (embed)
+         - evince <unfixed> (embed)
+         NOTE: at least parseafm code, maybe more?
+         - vftool <unfixed> (embed)
+         NOTE: just parseafm code it seems
  guichan
          - boswars <unfixed> (embed)
-Line 717 
 webkit
+Line 762 
 webkit
  ftgl
          - blender 2.46+dfsg-1 (embed)
+         - vtk <unfixed> (embed)
+         - paraview <unfixed> (embed)
+         NOTE: as part of its copy of vtk
+         - tulip <unfixed> (embed)
+         NOTE: depends on -dev but string found on binary
+         - root-system <unknown> (embed)
+         NOTE: depends on -dev package; not confirmed at source
+         - rgl <unknown> (embed)
+         NOTE: not sure if it is built
+         - mysql-gui-tools <unknown> (embed)
+         NOTE: not sure if it is built
+         - k3d <unfixed> (embed)
+         - extremetuxracer <unknown> (embed)
+         NOTE: not sure if it is built
+         - critterding <unknown> (embed)
+         - lightspeed <unfixed>
+         NOTE: depends on -dev but string found on binary
  wv
          - abiword <unfixed>
-Line 743 
 speex
+Line 805 
 speex
          - xine-lib <unfixed> (embed)
          - libfishsound <unfixed> (embed)
          - libannodex <removed> (embed)
+         - opal 3.4.2~dfsg-2 (embed)
+         - mumble 1.2.0~beta1-1 (embed)
          - vlc <unfixed> (embed)
          - xmms-speex <unfixed> (embed)
          - libsdl-sound1.2 <unfixed> (embed)
-Line 782 
 prototypejs
+Line 846 
 prototypejs
          - libjson-ruby 1.1.4-1 (embed; bug #555224)
          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
          - horde3 <unfixed> (embed)
-         - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
+         - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
          - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
          - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
-         - ebug-http <removed> (embed; bug #555236)
+         - ebug-http <unfixed> (embed; bug #555236)
          - libaws 2.7-1 (embed; bug #555222)
          - phpgedview <removed> (embed)
          - poker-network 1.7.6-1 (embed; bug #555238)
-Line 797 
 prototypejs
+Line 861 
 prototypejs
          - exaile 0.2.14+debian-2.1 (embed; bug #555245)
          - hobix 0.5~svn20070319-4 (embed; bug #555247)
          - zabbix 1.6.6-4 (embed; bug #555250)
-         - chora2 <unfixed> (embed; bug #555253)
+         - chora2 2.1.1+debian0-1 (embed; bug #555253)
-         - gollem <unfixed> (embed; bug # 555254)
+         - gollem 1.1.1+debian0-1 (embed; bug # 555254)
          - jscropperui 1.2.1-1 (embed; bug #555257)
          - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
          - ingo1 1.2.3+debian0-1 (embed; bug #555261)
-Line 817 
 prototypejs
+Line 881 
 prototypejs
          - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
          - xulrunner <unfixed> (embed)
          NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
+         - jclicmoodle <unfixed> (embed)
+         - git-cola <unfixed> (embed)
  gdb
          - insight <unfixed> (embed)
  e2fsprogs
          - ldiskfsprogs <unfixable> (fork)
+         - ia32-libs <unfixable> (embed)
  quazip (not packaged in Debian)
          - qcake <unfixed> (embed)
-Line 832 
 exo
+Line 899 
 exo
          - pcmanfm <unfixed> (embed; bug #499677)
          NOTE: slightly modified source code
+ xfce4-taskmanager
+         - lxtask <unfixed> (embed)
+         NOTE: old fork, maybe outdated
+ isync
+         - postler <unfixed> (embed; bug #628798)
  java
          - openjdk-6 <unfixed>
          - sun-java5 <unfixed>
-Line 852 
 libphp-snoopy
+Line 926 
 libphp-snoopy
          - magpierss 0.72-3 (embed; bug #431089)
  jquery
+         - jsonbot <unfixed> (embed; bug #625524)
          - zekr <unfixed> (embed)
          - wordpress <unknown> (embed)
          - yocto-reader <unfixed> (embed)
-Line 860 
 jquery
+Line 935 
 jquery
          NOTE: compressed file under examples/ dir
          - prewikka <unfixed> (embed)
          - libramaze-ruby <unfixed> (embed)
-         - drupal5 <unfixed> (embed)
+         - drupal6 <unfixed> (embed)
          - b2evolution <unfixed> (embed)
          - wesnoth <unfixed> (embed)
+         - gammu 1.28.95-1 (embed)
+         - trac <unfixed> (embed; bug #645339)
  tablesorter (jquery plugin, not packaged yet)
          - wesnoth <unfixed> (embed)
-Line 917 
 libmarkdown-php
+Line 994 
 libmarkdown-php
          - pixelpost 1.7.1-6 (embed)
  php-openid
-         - wordpress-openid <itp> (embed)
+         - wordpress-openid 3.3.2-1 (embed)
  geshi
          - dokuwiki 0.0.20080505-3.1 (embed)
-Line 983 
 rssparser (http://nwow.org)
+Line 1060 
 rssparser (http://nwow.org)
  lcms
          - openjdk-6 <unfixed> (fork)
          - gimp 2.4.0~rc2-2
+         - ia32-libs <unfixable> (embed)
  libphp-phplayersmenu
          - diogenes <unfixed>
-Line 1004 
 php-simpletest
+Line 1082 
 php-simpletest
          - moodle <unfixed>
  libpng
+         - doxygen 1.5.6-2 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - gdal 1.5.2-3 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - iceweasel <not-affected> (uses xulrunner)
          - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
          - iceape 1.0.13~pre080614i-0etch1 (embed)
+         - libfltk1.1 1.1.9-6 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - libtk-img <unfixed> (embed)
+         - htmldoc 1.8.27-3 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - xulrunner 1.9.0.13-1 (embed)
          [lenny] - xulrunner 1.9.0.11-0lenny1
          [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
          - gamera 3.2.3-1 (embed)
          - freeimage <unfixed> (embed)
-         - tuxonice-userui (static)
+         - syslinux-common <unfixable> (embed)
+         - tuxonice-userui <unfixed> (static)
+         - texlive-bin 2007.dfsg.2-1~lenny2 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - vice 1.22.dfsg1-0.1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - visualboyadvance 1.8.0-4 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - ia32-libs <unfixable> (embed)
  irssi
          - silc-client <unfixed> (embed)
-Line 1063 
 nusoap
+Line 1158 
 nusoap
          - phpwiki <unfixed> (embed)
          - gallery2 <unfixed> (embed)
          - typo3-src <unfixed> (embed)
+         - phpgacl 3.3.7-7 (embed)
+         - mantis 1.1.8+dfsg-1 (embed)
  libept
          - adept <unfixed> (embed; bug #540649)
-Line 1075 
 libvorbis
+Line 1172 
 libvorbis
          - iceape <unfixed> (embed)
          [etch] - iceape <not-affected> (introduced in 2.0)
          [lenny] - iceape <not-affected> (introduced in 2.0)
+         - ia32-libs <unfixable> (embed)
  cairo
          - iceweasel <not-affected> (uses xulrunner)
-Line 1117 
 polarssl (does not have a shared library
+Line 1215 
 polarssl (does not have a shared library
  pidgin (libpurple)
          - gaim <removed> (old-version)
          - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
+         - wengophone <unfixed> (embed; bug #601425)
  icu
          - webkit 1.0.1-1 (embed; bug #547214)
-Line 1167 
 expat
+Line 1266 
 expat
          - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
          - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
          - python2.4 <unfixable> (embed; bug #553403)
+         - python2.7 2.7-6 (embed)
+         - mcabber 0.10.0-1 (low; bug #601053)
          - python-4suite <unfixed> (embed; bug #516935)
          - wxwindows2.4 <removed> (embed)
          - wxwidgets2.6 2.6.3.2.2-4 (embed)
          - wxwidgets2.8 2.8.10.1-2 (embed)
+         - albert <unfixed> (embed; bug #600974)
          - celementtree 1.0.5-8 (embed)
          NOTE: Maybe that was fixed even earlier
+         - centerim <unfixed> (embed; bug #559783)
          - audacity 1.3.2-1 (embed)
          - matanza <unfixed> (embed)
          - tdom 0.8.3~20080525-1 (embed)
-Line 1183 
 expat
+Line 1286 
 expat
          - cadaver <unfixed> (embed)
          - cmake 2.6.0-6 (embed)
          - coin3 <unfixed> (embed)
+         - cvsnt 2.5.03.2382-3.3+lenny1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - dasher 4.7.3-1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - emboss 6.3.1-1 (embed)
          - gdcm 2.0.14-2 (embed)
          - ghostscript 8.71~dfsg-2 (embed)
          - grmonitor <removed> (embed)
          - iceape <unfixed> (embed)
          - insighttoolkit 3.16.0-1 (embed)
          NOTE: insighttoolkit might've been fixed earlier
+         - jabber 1.4.3-3.4 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - libparagui1.1 1.0.2-1 (embed)
+         - libspiff1 0.8.3-1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - paraview 3.6.2-1 (embed)
          - poco 1.3.6p1-1 (embed)
+         - scorched3d 41.3dfsg-1+b1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - simgear <unfixed> (embed)
          - sitecopy 1:0.16.0-1
          - smart <unfixed> (embed)
-Line 1205 
 expat
+Line 1319 
 expat
          - kompozer <unfixed> (embed)
          - vxl 1.13.0-2 (embed)
          - xulrunner <unfixed> (embed)
+         - xmame 0.106-2.1 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
          - apache2 2.2 (embed)
          - texlive-bin <not-affected> (Embedded code not compiled in)
          - vnc4 <unfixed> (embed)
          - xotcl 1.6.6-1 (embed)
          - chromium-browser 5.0.375.29~r46008-3
+         - ia32-libs <unfixable> (embed)
  xerces-c
          - xerces-c2 <unfixed> (old-version)
-Line 1234 
 galib
+Line 1351 
 galib
          - gamera 3.2.3-1 (embed)
  configobj
-         - bzr 2.1.0~rc2-1 (embed; bug #555336)
+         - bzr <unfixed> (embed; bug #555336)
          - elisa <unfixed> (embed; bug #555337)
          - gaupol <unfixed> (embed; bug #555338)
          - ipython <unfixed> (embed; bug #555339)
-Line 1287 
 celementtree
+Line 1404 
 celementtree
  elementtree
          - python2.5 <unfixed> (embed)
          - python2.6 <unfixed> (embed)
-         - bzr 2.1.0~rc2-1 (embed; bug #555343)
+         - bzr <unfixed> (embed; bug #555343)
          - gedit 2.28.2-1 (embed; bug #555344)
          - smart <unfixed> (embed)
          - solfege <unfixed> (embed; bug #555345)
-Line 1310 
 python2.5
+Line 1427 
 python2.5
          NOTE: embeds stdlib modules: ConfigParser
          - museek+ <unfixed> (embed; bug #555428)
          NOTE: embeds stdlib modules: ConfigParser
-         - vegastrike-data <unfixed> (embed)
+         - vegastrike-data <removed> (embed)
          NOTE: embeds many stdlib modules
          - codespeak-lib 1.1.1-1 (embed; bug #555420)
          NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
-Line 1340 
 python2.5
+Line 1457 
 python2.5
          NOTE: embeds stdlib modules: uuid
          - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
          NOTE: embeds stdlib modules: uuid
-         - setroubleshoot <unfixed> (embed; bug #555431)
+         - setroubleshoot <removed> (embed; bug #555431)
          NOTE: embeds stdlib modules: uuid
          - linkchecker <unfixed> (embed; bug #555414)
          NOTE: embeds msgfmt.py script
-Line 1422 
 distribute
+Line 1539 
 distribute
          - setuptools <removed> (old-version)
  rails
-         - jruby1.2 <unfixed> (embed) [./bench/rails/*]
+         - jruby1.2 <removed> (embed) [./bench/rails/*]
+         NOTE: jruby is in non-free, it probably includes rails too
          - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
          - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
          - thin <unfixed> (embed) [./spec/rails_app/*]
-Line 1489 
 agg:
+Line 1607 
 agg:
  vtk
          - paraview <unfixable> (embed; bug #495426)
+         - libmesh <unfixed>
+         NOTE: embeds exodus; not sure if there's a version external to vtk
  txt2tags
          - rednotebook <unfixed> (embed)
-Line 1507 
 horde3 (prototype.js is among the embeds
+Line 1627 
 horde3 (prototype.js is among the embeds
          NOTE: Text_Diff (wp-includes/Text/Diff*)
  cimg
-         - gmic <itp> (embed)
+         - gmic <unfixed> (embed)
  mootools
-         - gmic <itp> (embed)
+         - kdenetwork <unfixed> (embed)
+         - gallery <unfixed> (embed)
+         - jspwiki <unfixed> (embed)
+         - vdr-plugin-live <unfixed> (embed)
+         - perl-doc-html <unfixed> (embed)
  openldap
          - openldap2.3 <removed> (old-version)
+         - ia32-libs <unfixable> (embed)
  grub2
          - grub <unfixed> (old-version)
-Line 1527 
 python-dateutil
+Line 1652 
 python-dateutil
  cups
          - cupsys <removed> (old-version)
+         - ia32-libs <unfixable> (embed)
  yui
          - bcfg2 <not-affected> (present in source but not included in any binary files)
-Line 1535 
 yui
+Line 1661 
 yui
          - jifty 0.91117-1 (embed; bug #557748)
          - webgui 7.7.26-1 (embed)
          - loggerhead 1.17-1 (embed)
+         - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
  quake3 (vanilla source not packaged in debian)
          - openarena <unfixable> (fork)
-Line 1543 
 quake2 (vanilla source not packaged in d
+Line 1670 
 quake2 (vanilla source not packaged in d
          - alien-arena <unfixable> (fork)
          - warsow <unfixable> (fork)
+ quake (vanilla source not packaged in debian)
+         - darkplaces <unfixable> (fork)
+         - quakespasm <unfixable> (fork)
+         - nexuiz 2.5.2+dp-1 (old-version)
+         NOTE: before 2.5.2+dp this was an outdated version of darkplaces
  libtheora
          - iceweasel <not-affected> (uses xulrunner)
          - xulrunner <unfixed> (embed; bug #540959)
-Line 1554 
 libtheora
+Line 1687 
 libtheora
  dtoa
          - bfilter <unfixed> (embed)
-         - cacao <unfixed> (embed)
+         - cacao <removed> (embed)
          - cdrdao <unfixed> (embed)
          - classpath <unfixed> (embed)
          - freej <unfixed> (embed)
-Line 1594 
 ptmalloc (not packaged in Debian)
+Line 1727 
 ptmalloc (not packaged in Debian)
  svgalib
          - usplash <unfixed> (embed)
+         - ia32-libs <unfixable> (embed)
  bogl
          - usplash <unfixed> (embed)
-Line 1658 
 libtool
+Line 1792 
 libtool
          - parser-mysql <unfixed> (embed)
          - pinball 0.3.1-11 (embed)
          - redland <unfixed> (embed)
-         - siproxd <unfixed> (embed)
+         - siproxd 1:0.8.1-2 (embed; bug #657070)
          - ski <unfixed> (embed)
          - synfig 0.62.00-1 (embed)
          - unixodbc 2.2.4-5 (embed)
-Line 1680 
 libtool
+Line 1814 
 libtool
          NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
          NOTE: might've been fixed earlier
          - gcc-* <unknown> (embed)
+         - ia32-libs <unfixable> (embed)
  ocamlgsl
          - orpie 1.5.1-7.1 (embed; bug #550058)
-Line 1687 
 ocamlgsl
+Line 1822 
 ocamlgsl
  xdotool
          - keynav <unfixed> (embed; bug #560103)
- bulletphysics (not packaged; http://www.bulletphysics.org/)
+ bulletphysics (not packaged; RFP bug #476284; http://www.bulletphysics.org/)
          - supertuxkart <unfixed> (embed)
          - blender <unfixed> (embed)
+         - critterding <unfixed> (embed)
+         NOTE: http://lists.debian.org/4B5A7549.4090801@gmail.com
  ghostscript
          - gs-gpl <removed> (old-version)
-Line 1717 
 phpass (http://www.openwall.com/phpass/)
+Line 1854 
 phpass (http://www.openwall.com/phpass/)
          NOTE: a copyright owner search didn't match anything
          - libauthen-passphrase-perl <unfixable> (fork)
          NOTE: perl implementation of phpass
+         - phpbb3 <unfixed>
+         NOTE: hash identifier modified: s/P/H/; recent version 0.3 of phpass recognises it
  squirrelmail
          - wordpress <unfixed> (embed)
-Line 1732 
 Diff.php (Clay Loveless' version/killers
+Line 1871 
 Diff.php (Clay Loveless' version/killers
  libm (provided by libc)
          - spring <unfixed> (embed)
          NOTE: embedded by embedded copy of streflop
+         - megaglest <unfixed> (embed)
+         NOTE: embedded by embedded copy of streflop
          - aide <unfixed> (static)
          - busybox <unfixed> (static)
          - mindi-busybox <unfixed> (static)
-Line 1740 
 libm (provided by libc)
+Line 1881 
 libm (provided by libc)
          - tuxonice-userui <unfixed> (static)
          - zsh <unfixed> (static)
          NOTE: zsh-static
+         - tripwire <unfixed>
- streflop
+ streflop (http://nicolas.brodu.numerimoire.net/en/programmation/streflop/)
-         - spring <unfixed> (embed)
+         - spring <unfixed> (modified-embed)
+         NOTE: old, modified version of streflop
+         - megaglest <unfixed> (modified-embed)
+         NOTE: megaglest uses the same streflop code as spring
  minizip
          - spring <unfixed> (embed)
-Line 1800 
 maildrop
+Line 1945 
 maildrop
          - courier <unfixed> (embed) [./maildrop]
  glee
-         - warzone2100 <unfixed> (embed)
+         - warzone2100 <not-affected> (embed)
  phing
          - symfony <unfixed> (embed)
-Line 1862 
 openjpeg
+Line 2007 
 openjpeg
  libjpeg6b
          - freeimage <unfixed> (embed)
+         - ia32-libs <unfixable> (embed)
  libjpeg (don't know what exact version)
          - dcmtk <unfixed>
          - gdcm <unfixed>
          - insighttoolkit <unfixed>
-         - openarena <unfixed> (bug #495966)
+         - openarena 0.8.5-5+exp1 (bug #495966)
          - outguess <unfixed>
          - squeak-vm <unfixed> (embed)
          - tremulous <unfixed>
-Line 1885 
 libjpeg (don't know what exact version)
+Line 2031 
 libjpeg (don't know what exact version)
  lxr
-         - lxr-cvs (embed)
+         - lxr-cvs <unfixed> (embed)
  libfile-copy-recursive-perl
          - r-base <unfixed> (embed; bug #577427)
-Line 1901 
 libsmf (ITP: #572558)
+Line 2047 
 libsmf (ITP: #572558)
  libselinux
          - dpkg 1.15.6 (static)
+         - ia32-libs <unfixable> (embed)
  xinha (ITP: #479708)
          - horde3 <unfixed>
-Line 1923 
 tex4ht
+Line 2070 
 tex4ht
  freetype
          - texlive-bin 2009-1 (embed)
+         - ia32-libs <unfixable> (embed)
  freetype2
          - texlive-bin 2009-1 (embed)
+         - tuxonice-userui <unfixed> (static)
+         - instantbird <unfixed>
+         - qt4-x11 <unknown> (embed)
+         - vtk <unknown> (embed)
+         - paraview <unknown> (embed)
+         NOTE: from embedded copy of vtk
  silgraphite
          - texlive-bin <unfixed> (embed)
-Line 1938 
 jbig2dec
+Line 2092 
 jbig2dec
  libxml2
          - chromium-browser 5.0.375.29~r46008-1
+         - ia32-libs <unfixable> (embed)
  protobuf
          - chromium-browser 5.0.375.70~r48679-2
-Line 1947 
 libv8
+Line 2102 
 libv8
  nspr
          - chromium-browser 5.0.375.29~r46008-3
+         - ia32-libs <unfixable> (embed)
  yasm
          - chromium-browser 5.0.375.29~r46008-2
  libxslt
          - chromium-browser 5.0.375.29~r46008-1
+         - ia32-libs <unfixable> (embed)
+ miniupnpc
+         - warzone2100 2.3.7-2
+         NOTE: code still present in tarball but removed during build and unused
+         - vino 3.2.2-1
+         NOTE: code still present in tarball but removed during build and unused
+ iniparser (not packaged in Debian; RFP bug #582657)
+         - warzone2100 <unfixed> (modified-embed)
+ pyglet
+         - sympy <unfixed> (embed; bug #459716)
+ mpmath
+         - sympy <unfixed> (embed; bug #541746)
+ openssh
+         - libpam-ssh <unfixed> (embed; bug #598522)
+ curl
+         - cmake 2.6.0-6 (embed)
+         NOTE: Might be fixed earlier. Lenny version recorded.
+         - criticalmass <unfixed> (static; bug #599061)
+         - wengophone 2.1.0~beta1-svn9983-1 (embed)
+         - ia32-libs <unfixable> (embed)
+ lib3ds
+         - boson <unfixed> (embed; bug #600900)
+         - openscenegraph <unfixed> (embed; bug #601181)
+ xcftools
+         - gnome-xcf-thumbnailer <unfixed> (embed)
+ simplejson
+         - exaile <unfixed> (embed; bug #604547)
+ libasycns
+         - loudmouth <unfixed> (embed; bug #566143)
+ plplot
+         - emboss <unfixed> (fork)
+ acl
+         - ia32-libs <unfixable> (embed)
+ arts
+         - ia32-libs <unfixable> (embed)
+ attr
+         - ia32-libs <unfixable> (embed)
+ audiofile
+         - ia32-libs <unfixable> (embed)
+ avahi
+         - ia32-libs <unfixable> (embed)
+ celt
+         - ia32-libs <unfixable> (embed)
+ coreutils
+         - ia32-libs <unfixable> (embed)
+ cyrus-sasl2
+         - ia32-libs <unfixable> (embed)
+ db4.8
+         - ia32-libs <unfixable> (embed)
+ dbus
+         - ia32-libs <unfixable> (embed)
+ directfb
+         - ia32-libs <unfixable> (embed)
+ esound
+         - ia32-libs <unfixable> (embed)
+ fltk1.1
+         - ia32-libs <unfixable> (embed)
+ fontconfig
+         - ia32-libs <unfixable> (embed)
+ freeglut
+         - ia32-libs <unfixable> (embed)
+ gcc-3.3
+         - ia32-libs <unfixable> (embed)
+ gdbm
+         - ia32-libs <unfixable> (embed)
+ gnutls26
+         - ia32-libs <unfixable> (embed)
+ hal
+         - ia32-libs <unfixable> (embed)
+ isdnutils
+         - ia32-libs <unfixable> (embed)
+ jack-audio-connection-kit
+         - ia32-libs <unfixable> (embed)
+ keyutils
+         - ia32-libs <unfixable> (embed)
+ krb5
+         - ia32-libs <unfixable> (embed)
+ lesstif2
+         - ia32-libs <unfixable> (embed)
+ libaio
+         - ia32-libs <unfixable> (embed)
+ libasyncns
+         - ia32-libs <unfixable> (embed)
+ libcap2
+         - ia32-libs <unfixable> (embed)
+ libdrm
+         - ia32-libs <unfixable> (embed)
+ libedit
+         - ia32-libs <unfixable> (embed)
+ libexif
+         - ia32-libs <unfixable> (embed)
+ libgcrypt11
+         - ia32-libs <unfixable> (embed)
+ libgpg-error
+         - ia32-libs <unfixable> (embed)
+ libgphoto2
+         - ia32-libs <unfixable> (embed)
+ libice
+         - ia32-libs <unfixable> (embed)
+ libieee1284
+         - ia32-libs <unfixable> (embed)
+ libjpeg8
+         - ia32-libs <unfixable> (embed)
+ libnss-ldap
+         - ia32-libs <unfixable> (embed)
+ libogg
+         - ia32-libs <unfixable> (embed)
+ libpam-ldap
+         - ia32-libs <unfixable> (embed)
+ libsamplerate
+         - ia32-libs <unfixable> (embed)
+ libsdl1.2
+         - ia32-libs <unfixable> (embed)
+ libsm
+         - ia32-libs <unfixable> (embed)
+ libssh2
+         - ia32-libs <unfixable> (embed)
+ libtasn1-3
+         - ia32-libs <unfixable> (embed)
+ libx11
+         - ia32-libs <unfixable> (embed)
+ libx86
+         - ia32-libs <unfixable> (embed)
+ libxau
+         - ia32-libs <unfixable> (embed)
+ libxcb
+         - ia32-libs <unfixable> (embed)
+ libxcomposite
+         - ia32-libs <unfixable> (embed)
+ libxcursor
+         - ia32-libs <unfixable> (embed)
+ libxdamage
+         - ia32-libs <unfixable> (embed)
+ libxdmcp
+         - ia32-libs <unfixable> (embed)
+ libxext
+         - ia32-libs <unfixable> (embed)
+ libxfixes
+         - ia32-libs <unfixable> (embed)
+ libxi
+         - ia32-libs <unfixable> (embed)
+ libxinerama
+         - ia32-libs <unfixable> (embed)
+ libxmu
+         - ia32-libs <unfixable> (embed)
+ libxp
+         - ia32-libs <unfixable> (embed)
+ libxrandr
+         - ia32-libs <unfixable> (embed)
+ libxrender
+         - ia32-libs <unfixable> (embed)
+ libxss
+         - ia32-libs <unfixable> (embed)
+ libxt
+         - ia32-libs <unfixable> (embed)
+ libxtst
+         - ia32-libs <unfixable> (embed)
+ libxv
+         - ia32-libs <unfixable> (embed)
+ libxxf86vm
+         - ia32-libs <unfixable> (embed)
+ lzo2
+         - ia32-libs <unfixable> (embed)
+ mesa
+         - ia32-libs <unfixable> (embed)
+ mpg123
+         - ia32-libs <unfixable> (embed)
+ nas
+         - ia32-libs <unfixable> (embed)
+ nss
+         - ia32-libs <unfixable> (embed)
+ openal-soft
+         - ia32-libs <unfixable> (embed)
+ openssl
+         - ia32-libs <unfixable> (embed)
+ pam
+         - ia32-libs <unfixable> (embed)
+ popt
+         - ia32-libs <unfixable> (embed)
+ pulseaudio
+         - ia32-libs <unfixable> (embed)
+ sane-backends
+         - ia32-libs <unfixable> (embed)
+ sqlite3
+         - ia32-libs <unfixable> (embed)
+         - chromium-browser <unfixed> (embed)
+ sysfsutils
+         - ia32-libs <unfixable> (embed)
+ tcp-wrappers
+         - ia32-libs <unfixable> (embed)
+ tdb
+               - thunar 1.2.1-3 (old-version)
+         - ia32-libs <unfixable> (embed)
+ tslib
+         - ia32-libs <unfixable> (embed)
+ unixodbc
+         - ia32-libs <unfixable> (embed)
+ xaw3d
+         - ia32-libs <unfixable> (embed)
+ xbitmaps
+         - ia32-libs <unfixable> (embed)
+ xcb-util
+         - ia32-libs <unfixable> (embed)
+ xcursor-themes
+         - ia32-libs <unfixable> (embed)
+ xft
+         - ia32-libs <unfixable> (embed)
+ dicomparser
+         - vtk <unfixed>
+         - paraview <unfixed>
+         NOTE: as part of its copy of vtk
+         - insighttoolkit <unfixed>
+ proj
+         - vtk <unfixed>
+         - paraview <unfixed>
+         NOTE: as part of its copy of vtk
+         - therion <unfixed>
+         - python-pyproj 1.8.6-1
+ netcdf
+         - vtk <unfixed>
+         - paraview <unfixed>
+         NOTE: as part of its copy of vtk
+ insighttoolkit
+         - vtk <unfixed> (embed)
+         NOTE: embeds at least MetaIO
+         - paraview <unfixed> (embed)
+         NOTE: embeds at least MetaIO
+ gl2ps
+         - vtk <unfixed>
+         - paraview <unfixed>
+         NOTE: as part of its copy of vtk
+         - avogadro <unfixed>
+         - gabedit <unknown> (embed)
+         NOTE: not sure if it is built
+         - drawxtl <unfixed> (embed)
+         - rgl <unfixed> (embed)
+         - gmsh <unfixed>
+         - mcrl2 <unfixed> (embed)
+         - mysql-gui-tools <unknown> (embed)
+         NOTE: not sure if it is built
+         - opencascade <unfixed> (embed)
+         - orsa <unfixed> (embed)
+         - qtiplot <unfixed> (embed)
+         - qwtplot3d <unfixed> (embed)
+         - root-system <unknown> (embed)
+         NOTE: not sure if it is built
+         - scilab <unfixed> (embed)
+         - snd <unknown> (embed)
+         NOTE: not sure if it is built
+         - xmakemol <unfixed> (embed)
+ qwtplot3d
+         - qtiplot <unfixed>
+ parseafm (from Adobe)
+         - vftool <unfixed>
+         - gnustep-back <unknown>
+         NOTE: looks like it isn't built
+         - evince <unfixed>
+ bugzilla
+         - perl <unknown>
+         - libcgi-pm-perl <unknown>
+ isc-dhcp
+         - dhcp3 <unfixable> (old-version)
+         - dhcp <unfixable> (old-version)
+ chipmunk (ITP: #623274)
+         - xmoto <unfixed> (embed; bug #623299)
+         - libtuxcap <unfixed> (embed; bug #623300)
+ libsigsegv
+         - gawk 3.1.8+dfsg-0.1
+ pdfrw
+         - rst2pdf <unfixed> (embed; bug #638607)
+ bind9
+         - isc-dhcp <unfixed> (embed; bug #643569)
+         NOTE: introduced in upstream 4.2 series
+ qof
+         - gnucash <unfixed> (embed; bug #556245)
+ feathery (not packaged in Debian, http://sourceforge.net/projects/feathery/)
+         - megaglest <unfixed> (modified-embed)
+ acsccid
+         - ccid 1.3.11 <unfixed> (fork)
+         - openct <unfixed> (modified-embed)
+         - towitoko <unfixed> (modified-embed)
+ ccid
+         - openct <unfixed> (modified-embed)
+         - towitoko <unfixed> (modified-embed)

 Legend:



Removed from v.15007
 


changed lines


 
Added in v.18637
 Legend:



Removed from v.15007
 


changed lines


 
Added in v.18637
-Removed from v.15007
+Added in v.18637

	ViewVC Help
Powered by ViewVC 1.1.5