/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7923 by stef-guest, Mon Jan 14 21:43:39 2008 UTC revision 13248 by jwilk-guest, Mon Nov 9 15:00:44 2009 UTC
# Line 1  Line 1 
1  Embedded code copies  Embedded code copies
2  ====================  ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects which is considered bad for fixing security flaws  This is considered bad for fixing security flaws because the fix needs
6  because the fix needs to be applied in multiple source packages.  to be applied in multiple source packages.
7    
8  Format:  Format:
9  <srcpkg> (<optional comment about srcpkg>)  <srcpkg> (<optional comment about srcpkg>)
10          - <embedding srcpkg> <status> (<sort>; bug #<number>)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>, <itp> or <unknown> if the version number can not be determined  status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embedding a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and thus might share parts of the source code)        fork (the package is not just embedding code but it is a fork and
20                thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24  The srcpkg might be some string to identify the code if there is no specific source package.  The srcpkg might be some string to identify the code if there is no
25    specific source package.
26    
27  Everything up to the next line is ignored  Everything up to the next line is ignored.
28  ---BEGIN  ---BEGIN
29  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
31          - pdftohtml <unknown>          - pdftohtml <unknown>
32          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
33          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
34          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
35          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
37          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
38          NOTE: links to poppler          NOTE: links to poppler
39          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
40          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
41          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
42          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
43          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
45          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50  ppmd  ppmd
51          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59    
60    peercast
61            - gnome-peercast <removed> (embed)
62            [etch] - gnome-peercast <unfixed> (embed)
63    
64  silc-toolkit  silc-toolkit
65          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
66    
67    icclib
68            - ghostscript <unfixed> (embed)
69            - argyll <unfixed> (embed)
70    
71  dietlibc  dietlibc
72          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
73    
74    libmikmod
75            - sdl-mixer1.2 <unfixed> (embed)
76            TODO: report bug
77    
78  libiax  libiax
79          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
80    
81    spandsp
82            - iaxmodem <unfixable> (embed; bug #548885)
83    
84  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
85          - dpkg <unfixed> (embed)          - dpkg <unfixed> (embed)
# Line 67  zlib (lots of apps embed a copy, but lin Line 93  zlib (lots of apps embed a copy, but lin
93          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
94          - rpm <unknown> (embed)          - rpm <unknown> (embed)
95          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
96            - tuxcmd-modules <unfixed> (embed)
97            - zsync <unfixed>
98            - tra <unfixed>
99            - sash <unfixed>
100            - nsis <unfixed>
101            - mseide-msegui <unfixed>
102            NOTE: mseide
103            - mirrordir <unfixed>
104            - poco <unfixed>
105            - klibc <unfixed>
106            - ghostscript <unfixed>
107            - freeimage <unfixed>
108            - clamav <unfixed> (fork)
109            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
110            - tuxonice-userui <unfixed>
111            - plt-scheme <unfixed>
112            - perl <unfixed>
113            - paraview <unfixed>
114            - gcvs <unfixed>
115            - dump <unfixed>
116            - aide <unfixed> (static)
117            - dar <unfixed> (static)
118            - avfs <unfixed>
119            - fpc <unfixed>
120            - winff <unfixed>
121            NOTE: inherited from fpc, see #472304
122            - lazarus <unfixed>
123            NOTE: inherited from fpc, see #472304
124            - erlang <unfixed> (embed)
125            - gamera 3.2.3-1 (embed)
126            - python2.4 <unfixed> (embed; bug #553403)
127            - python2.5 <unfixed> (embed; bug #553403)
128    
129    dulwich
130            - hg-git 0.1.0-1 (embed; bug #541996)
131    
132    libvigraimpex
133            - hugin <unfixed> (embed; bug #542259)
134            - enblend-enfuse <unfixed> (embed; bug #542258)
135            - gamera 3.2.3-1 (embed)
136    
137  libbz2  libbz2
138          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
139    
140  ekg  libgadu
141          - centericq <unfixed> (embed)          - centericq <unfixed> (embed)
142          - gaim <unfixed> (embed)          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
143          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
144          - kopete 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
145          - kadu <unfixed> (embed)          NOTE: from kdenetwork: kopete
146          - gadu <unfixed> (embed)          - ekg 1:1.8~rc0-1 (embed)
147          NOTE: g/kadu not packaged in Debian yet          - kadu 0.6.0.2-3 (embed; bug #504430)
148            - gadu <itp> (embed)
149    
150  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
151          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
152          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
153          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
154          - phpwiki (embed)          - phpwiki <unfixed> (embed)
155          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
156          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
157    
# Line 92  shtool (affects build-time only) Line 159  shtool (affects build-time only)
159          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
160          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
161    
162  mozilla source code  iceape
163          - mozilla-firefox <unfixed> (embed)          - iceweasel <unfixed> (fork)
164          - mozilla-thunderbird          - icedove <unfixed> (fork)
165          - firefox <removed>          - xulrunner <unfixed> (fork)
166          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
         - thunderbird <removed>  
         [etch] - thunderbird <unfixed> (embed)  
         - iceweasel <unfixed> (embed)  
         - iceape <unfixed> (embed)  
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
167    
168  xli  xli
169          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
170    
171  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
172          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
173          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed)
         NOTE: in libxpm  
174    
175  kerberized apps with BSD origin  kerberized apps with BSD origin
176          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
177          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
178          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
179    
180  grip (which pkg is the origin?)  grip (which pkg is the origin?)
181          - libcdaudio          - libcdaudio <unfixed>
182          - grip          - grip <unfixed>
183          - gnome-vfs          - gnome-vfs <unfixed>
184          TODO: check vfs2 as well          TODO: check vfs2 as well
185    
186  fudforum  fudforum
187          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
188          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
189          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
190    
191    libbsd
192            - rdate 1:1.2-3 (embed)
193            - atheme-services <unfixed>
194            - libbsd-arc4random-perl <unfixed>
195            - isakmpd <unfixed>
196    
197  cvs  cvs
198          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
199          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
200    
201  pcre  pcre3
         - python* <unfixed> (embed)  
202          - php4 <unknown> (embed)          - php4 <unknown> (embed)
203          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
204          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
205            NOTE: libgoffice-*
206          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
207          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
208          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
209          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
210          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
211          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
212          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
213          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
214          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
215          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
216            - tin 980117-1 (embed)
217            - kazehakase 0.5.2-1
218            - webkit 1.0.1-1 (embed)
219            - qt4-x11 <unfixed> (embed)
220            NOTE: embedded via webkit copy
221            - erlang <unfixed> (embed)
222    
223  tiff  tiff
224          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
225          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
226    
227  uudeview  uudeview
228          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
229            - pan <unfixed> (embed)
230    
231  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
232          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
233          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
234          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
235    
236  util-linux/mount  util-linux/mount
237          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
238          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
239    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
240  sylpheed  sylpheed
241          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
242    
# Line 184  phpldapadmin Line 251  phpldapadmin
251  chmlib  chmlib
252          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
253    
254  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
255          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
256          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
257          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
258          - vlc <unfixed> (static)          - smilutils 0.3.0-10
259          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
260          - motion <unfixed> (static)          - motion 3.1.19-1
261          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
262          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed> (static)
         - xmovie <unfixed>  
263          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
264            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
265    
266  mad MPEG decoding lib  faad2
267          - mad <unfixed> (embed)          - mplayer 1.0~rc2-20 (embed)
268            - avifile <unfixed> (embed; bug #538750)
269    
270    libmad (MPEG decoding lib)
271          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
272            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
273            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
274    
275  libdts  libdts
276          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 214  libmpeg2 Line 286  libmpeg2
286          - mpeg2dec <unfixed> (embed)          - mpeg2dec <unfixed> (embed)
287          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
288    
289  curl  libntlm
290          - wget <unfixed> (embed)          - wget <unfixed> (fork; bug #550436)
291          NOTE: code for NTLM authentication          - curl <unfixed> (fork; bug #550437)
292            - cntlm <unfixed> (fork; bug #550438)
293    
294  uw-imap  uw-imap
295          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 225  uw-imap Line 298  uw-imap
298  imagemagick  imagemagick
299          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
300    
301    python-urlgrabber
302            - mercurial <unfixed> (embed; bug #531062)
303            - w3af <unfixed> (embed; bug #555372)
304            [experimental] - harvestman <unfixed> (embed; bug #555373)
305    
306    beautifulsoup
307            - python-mechanize <unfixed> (embed; bug #555349)
308            - zope2.11 <unfixed> (embed; bug #555350)
309            - twill <unknown> (embed; bug #555351)
310    
311  halibut  halibut
312          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
313    
314  libghttp  libghttp
315          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
316    
317  libsndfile  libsndfile
318          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
319    
320  glibmm2.4  glibmm2.4
321          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
322    
323  libgnomecanvasmm2.6  libgnomecanvasmm2.6
324          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
325    
326  libsigc++-2.0  libsigc++-2.0
327          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
328    
329  soundtouch  soundtouch
330          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
331    
332  libmms  libmms
333          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
334          - mimms <unfixed> (embed)          - mimms <unfixed> (embed)
335    
336  fckeditor  fckeditor
337          - knowledgeroot <unfixed> (embed)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
338          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
339          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
340          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
341            - request-tracker3.8 <unfixed> (embed)
342    
343  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
344          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
345    
346  libphp-phpmailer  libphp-phpmailer
347          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
348            - mahara <unfixed> (embed)
349            - symfony <unfixed> (embed)
350            [etch] - phpgroupware <unfixed> (embed)
351            NOTE: phpgroupware-felamimail is only in etch
352            - egroupware <unfixed> (embed; bug #504283)
353            - glpi <unfixed>
354    
355  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
356          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
357    
358  bennu (not packaged in Debian)  giflib
359          - moodle <unfixed> (embed)          - wine <unfixed> (embed; bug #466181)
360    
361  smarty:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
362          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
363    
364    smarty
365            - moodle 1.8.2-2 (embed; bug #471158)
366            - gallery2 2.2.5-2 (embed; bug #471160)
367            - mahara 0.9.2-2 (embed; bug #471201)
368            - gosa 2.4beta1-1 (embed; bug #471200)
369    
370  TinyMCE  TinyMCE
371          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
372          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
373          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
374          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
375    
376  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
377          - scite <unfixed> (embed)          - scite <unfixed> (embed)
378          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
379          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
380          - geany <unfixed> (embed)          - geany <unfixed> (fork)
381            - anjuta <unfixed> (embed)
382    
383  libphp-adodb  libphp-adodb
384          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
385          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
386          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
387          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
388          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
389          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
390            - torrentflux 2.0beta1-2 (embed)
391          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
392          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
393          - cacti <unknown> (embed)          - cacti <unknown> (embed)
394          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
395          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
396            - gforge 4.7~rc2-6 (embed)
397            - mahara <unfixed> (embed)
398    
399  gzip  gzip
400          - linux-kernel <unfixed> (embed)          - linux-kernel <unfixed> (embed)
# Line 305  gzip Line 404  gzip
404          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
405    
406  neon  neon
407          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
408          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
409          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
410            - litmus <removed> (embed; #395875)
411          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
412          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.3-5 (embed; bug #395876)
413          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
414          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
415    
# Line 328  tinyxml (not packaged in Debian) Line 428  tinyxml (not packaged in Debian)
428  gv  gv
429          - evince <unfixed> (embed)          - evince <unfixed> (embed)
430          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
431          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
432    
433  libXbae  libXbae
434          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
435          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
436    
437    libgtkhtml
438            - claws-mail-extra-plugins <unfixed> (fork)
439    
440  libXaw  libXaw
441          [etc] - libpawlib2-lesstif          - paw <removed> (embed)
442          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
443          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
444    
445  libgd2  libgd2
446          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
447          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
448            - wml <unfixed> (embed)
449            - libwmf <unfixed> (embed)
450            NOTE: derived from gd 1.6.3
451    
452  rar  rar
453          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 356  mplayer (DirectMedia Object loader) Line 461  mplayer (DirectMedia Object loader)
461          NOTE: src/libw32dll/          NOTE: src/libw32dll/
462          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
463          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
464            - mplayer 1.0~rc2-20 (embed)
465    
466  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
467          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 364  fsplib (http://sourceforge.net/projects/ Line 470  fsplib (http://sourceforge.net/projects/
470          - gftp <unfixed> (embed)          - gftp <unfixed> (embed)
471          NOTE: lib/fsplib version 0.3          NOTE: lib/fsplib version 0.3
472    
473    sprng
474            - tree-puzzle <unfixed> (embed)
475    
476  librpcsecgss  librpcsecgss
477          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
478    
# Line 371  jasper Line 480  jasper
480          - ghostscript <unfixed> (embed)          - ghostscript <unfixed> (embed)
481          - gs-gpl <unfixed> (embed)          - gs-gpl <unfixed> (embed)
482    
483    libiris
484            - psi <unfixed> (embed)
485            - kdenetwork <unfixed> (embed)
486            NOTE: kopete embeds libiris but links dynamically to libidn
487            - kdegames <unfixed> (embed)
488            NOTE: ksirk/kde4
489    
490  libidn  libidn
491          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
492            - psi <unfixed> (embed)
493            NOTE: psi embeds libiris which embeds libidn
494            - kdegames <unfixed> (embed)
495            NOTE: kdegames/kde4 embeds libiris which embeds libidn
496    
497  liblua  liblua
498          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
499            - nmap 5.00-1 (embed; bug #527997)
500            [lenny] - nmap <unfixed> (embed; bug #527997)
501    
502  libbotan  libbotan
503          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
504    
505  NetXX  NetXX
506          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
507    
508  libgc  libgc
509          - mono <unfixed> (embed)          - mono <unfixed> (embed)
510    
511  lzma  lzma
512          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
513            - xz-utils <unfixed> (fork)
514    
515  lzo  lzo
516          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
517    
518    yassl
519            - mysql-dfsg-5.0 <unfixed> (embed)
520    
521  pax code  pax code
522          - tar <unfixed> (embed)          - tar <unfixed> (embed)
523          - cpio <unfixed> (embed)          - cpio <unfixed> (embed)
# Line 399  pax code Line 525  pax code
525  t1lib  t1lib
526          - tetex-bin 2.0.2-1 (embed)          - tetex-bin 2.0.2-1 (embed)
527          - texlive-bin <unknown> (embed)          - texlive-bin <unknown> (embed)
528    
529    guichan
530            - boswars <unfixed> (embed)
531            NOTE: maintainer notified us, working on it
532    
533    tolua
534            - boswars <unfixed> (embed)
535            NOTE: maintainer notified us, working on it
536    
537    asio-dev
538            - luxrender <removed> (embed)
539    
540    xine-lib
541            - vlc <unfixed> (embed)
542            NOTE: only parts included in modules/access/rtsp
543    
544    netpbm
545            - tcl8.3 <unfixed> (embed)
546            - tcl8.4 <unfixed> (embed)
547            - tcl8.5 <unfixed> (embed)
548            NOTE: generic/tkImgGIF.c
549    
550    tk8.5
551            - tk8.0 <removed> (old-version)
552            - tk8.3 <unfixed> (old-version)
553            - tk8.4 <unfixed> (old-version)
554            - perl-tk <unfixable> (fork)
555    
556    samba
557            - mc 2:4.6.2~git20080311-1 (embed)
558            NOTE: maintainer is aware of this, currently searching a solution
559    
560    plib1.8.4c2
561            - boson <unfixed> (fork)
562            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
563    
564    fribidi
565            - quesoglc <unfixed> (embed)
566            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
567    
568    glew
569            - quesoglc <unfixed> (embed; bug #489341)
570            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
571    
572    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
573            - transcend <unfixed> (embed)
574            - cultivation <unfixed> (embed)
575            - passage <unfixed> (embed)
576            - gravitation <unfixed> (embed)
577    
578    tar
579            - libarchive <unfixed> (embed)
580            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
581    
582    cpio
583            - libarchive <unfixed> (embed)
584            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
585    
586    webkit
587            - qt4-x11 <unfixed> (embed)
588    
589    ftgl
590            - blender 2.46+dfsg-1 (embed)
591    
592    wv
593            - abiword <unfixed>
594    
595    qemu
596            - kvm <unfixed> (embed; bug #543159)
597            - xen-3 <unfixed> (embed)
598            - xen-unstable <unfixed> (embed)
599    
600    vgabios
601            - kvm <unfixed> (embed; bug #489442)
602    
603    bochs
604            - kvm <unfixed> (embed; bug #489442)
605    
606    speex
607            - vorbis-tools <unfixed> (embed)
608            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
609            - gst-plugins-good0.10 <unfixed> (embed)
610            - xine-lib <unfixed> (embed)
611            - libfishsound <unfixed> (embed)
612            - libannodex <unfixed> (embed)
613            - vlc <unfixed> (embed)
614            - xmms-speex <unfixed> (embed)
615            - libsdl-sound1.2 <unfixed> (embed)
616            - sweep <unfixed> (embed)
617    
618    libreadline
619            - magic <itp> (old-version)
620    
621    opcode
622            - ode <unfixed> (embed)
623            NOTE: opcode is not a package in debian, it is just embedded
624            NOTE: http://www.codercorner.com/Opcode.htm
625    
626    gimpact
627            - ode <unfixed> (embed)
628            NOTE: gimpact is not a package in debian, it is just embedded
629            NOTE: http://gimpact.sf.net
630    
631    mochikit
632            - mahara <unfixed> (embed)
633            NOTE: they require extra patches, still unmerged upstream
634            - ntop <unfixed> (embed)
635            - coherence 0.6.2-1 (embed)
636            - paste <unfixed> (embed)
637            - turbogears <unfixed> (embed)
638            - plone3 <unfixed> (embed)
639            - xulrunner <unfixed> (embed)
640            - libjifty-plugin-chart-perl <unfixed> (embed)
641            - sabnzbdplus <unfixed> (embed)
642            - tgmochikit <unfixed> (embed)
643    
644    prototypejs
645            - netbeans-ide 6.0.1+dfsg-2 (embed)
646            - auth2db <unfixed> (embed; bug #555218)
647            - webcit <unfixed> (embed; bug #555219)
648            - asterisk 1:1.6.2.0~rc3-1 (embed)
649            - libjson-ruby <unfixed> (embed; bug #555224)
650            - lucene2 <unfixed> (embed; bug #555226)
651            - horde3 <unfixed> (embed)
652            - knowledgeroot <unfixed> (embed; bug #555230)
653            - mediatomb <unfixed> (embed; bug #555233)
654            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
655            - ebug-http <unfixed> (embed; bug #555236)
656            - phpgedview <removed> (embed)
657            - poker-network <unfixed> (embed; bug #555238)
658            - rails 2.1.0-6 (embed)
659            - wordpress 2.5.0-2 (embed; bug #555243)
660            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
661            TODO: search through all of the other zope packages
662            - ampache 3.4.1-2 (embed)
663            - exaile <unfixed> (embed; bug #555245)
664            - hobix <unfixed> (embed; bug #555247)
665            - zabbix <unfixed> (embed; bug #555250)
666            - chora2 <unfixed> (embed; bug #555253)
667            - gollem <unfixed> (embed; bug # 555254)
668            - jscropperui <unfixed> (embed; bug #555257)
669            - scriptaculous <unfixed> (embed; bug #555260)
670            - ingo1 <unfixed> (embed; bug #555261)
671            - kronolith2 <unfixed> (embed; bug #555262)
672            - activeldap <unfixed> (embed)
673            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
674            - mantis <unfixed> (embed; bug #555265)
675            - otrs2 <unfixed> (embed; bug #555267)
676            - webcalendar <unfixed> (embed; bug #555269)
677            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
678            - jifty <unfixed> (embed; bug #555271)
679            - jquery <unfixed> (embed; bug #555272)
680            - passenger <unfixed> (embed; bug #555273)
681            - plone3 <unfixed> (embed; bug #555275)
682            - wesnoth <unfixed> (embed; bug #555277)
683            - xulrunner <unfixed> (embed)
684            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
685    
686    gdb
687            - insight <unfixed> (embed)
688    
689    e2fsprogs
690            - ldiskfsprogs <unfixable> (fork)
691    
692    quazip (not packaged in Debian)
693            - qcake <unfixed> (embed)
694            NOTE: starting with upstream version 0.6.4
695    
696    exo
697            - pcmanfm <unfixed> (embed; bug #499677)
698            NOTE: slightly modified source code
699    
700    java
701            - openjdk-6 <unfixed>
702            - sun-java5 <unfixed>
703            - sun-java6 <unfixed>
704    
705    libphp-snoopy
706            - ampache 3.4.1-2 (embed; bug #504169)
707            - mahara 1.0.5-2 (embed; bug #504170)
708            - pixelpost 1.7.1-5 (embed; bug #504171)
709            - mediamate 0.9.3.6-5 (embed; bug #504172)
710            - opendb <removed> (embed; bug #504173)
711            [etch] - opendb <unfixed> (embed; bug #504173)
712            - wordpress 2.5.1-9 (embed; bug #443948)
713            - moodle <unfixed> (embed; bug #507185)
714            [etch] - phpgroupware <unfixed> (embed)
715            NOTE: phpgroupware-felamimail
716            - magpierss 0.72-3 (embed; bug #431089)
717    
718    jquery
719            - zekr <unfixed> (embed)
720            - wordpress <unknown> (embed)
721            - yocto-reader <unfixed> (embed)
722            - textpattern <unfixed> (embed)
723            - genshi 0.5.1-1 (embed)
724            NOTE: compressed file under examples/ dir
725            - prewikka <unfixed> (embed)
726            - libramaze-ruby <unfixed> (embed)
727            - drupal5 <unfixed> (embed)
728            - b2evolution <unfixed> (embed)
729            - wesnoth <unfixed> (embed)
730    
731    tablesorter (jquery plugin, not packaged yet)
732            - wesnoth <unfixed> (embed)
733    
734    kses
735            - wordpress <unfixed> (embed; bug #504242)
736            NOTE: their copy has all methods renamed to wp_<foo>
737            NOTE: kses isn't in Debian, RFP: #504240
738            - moodle <unfixed> (embed; bug #507185)
739            - egroupware <unfixed> (embed)
740    
741    magpierss
742            - wordpress <unfixed> (embed; bug #504242)
743            - moodle <unfixed>
744    
745    php-gettext
746            - wordpress 2.8.4-1 (embed; bug #504242)
747    
748    libphp-ixr (name may change, it is the Incutio XML-RPC)
749            - wordpress <unfixed> (embed; bug #504242)
750            NOTE: libphp-ixr isn't in Debian, RFP: #504236
751            - dokuwiki <unfixed> (embed)
752            - textpattern <unfixed> (embed)
753    
754    libphp-cas
755            - glpi <unfixed> (embed)
756            - moodle <unfixed> (embed; bug #505984)
757    
758    scriptaculous (prototype.js is among the embeds in the following)
759            - glpi <unfixed> (embed)
760            - libaws <unfixed> (embed; bug #555222)
761            - op-panel <unfixed> (embed)
762            - symfony <unfixed> (embed)
763            NOTE: maintainer says there are extra incompatible changes required
764            - pixelpost <unfixed> (embed)
765            - webhelpers <unfixed> (embed)
766            - qwik <unfixed> (embed; bug #555241)
767            - smokeping <unfixed> (embed)
768            - turba2 <unfixed> (embed)
769            - typo3-src 4.2.3-1 (embed)
770            - request-tracker3.6 <unfixed> (embed)
771            - request-tracker3.8 <unfixed> (embed)
772            - rt-extension-emailcompletion <unfixed> (embed)
773    
774    libmarkdown-php
775            - moodle <unfixed> (embed; bug #507185)
776            - pixelpost <unfixed> (embed)
777    
778    php-openid
779            - wordpress-openid <itp> (embed)
780    
781    geshi
782            - dokuwiki 0.0.20080505-3.1 (embed)
783            - pgfouine 1.0-1.1 (embed)
784            - websvn 2.1.0-1 (embed)
785    
786    webcalendar
787            - gforge 4.7~rc2-6 (embed; bug #504758)
788    
789    libical
790            - kdepim <unfixed> (fork)
791            - kdepimlibs <unfixed> (fork)
792            NOTE: fixed in KDE4 post 4.1.x series
793            - claws-mail-extra-plugins <unfixed> (fork)
794    
795    libltdl3
796            - kdelibs <unfixed> (embed)
797            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
798            - synfig <unfixed> (embed)
799    
800    harfbuzz
801            - qt4-x11 <unfixed> (embed)
802    
803    libzip
804            - php5 <unfixed> (fork)
805            - odt2txt <unfixed> (embed; bug #523808)
806    
807    json.php (not packaged; should be replaced with php's built-in functions)
808            - moodle <unfixed>
809            - yui <unfixed>
810            - gallery2 <unfixed>
811            - dokuwiki <unfixed>
812            - typo3-src <unfixed>
813    
814    php-fpdf
815            - tcpdf <itp> (fork)
816            - moodle <unfixed>
817            - phpwiki <unfixed>
818            - egroupware <unfixed>
819            - ldap-account-manager <unfixed> (fork)
820    
821    tcpdf (itp: #495985)
822            - moodle <unfixed>
823            - phpmyadmin <unfixed>
824    
825    typo3
826            - moodle <unfixed>
827    
828    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
829            - moodle <unfixed>
830            - gosa <unfixed>
831    
832    php-ole (itp: #487558)
833            - moodle <unfixed>
834    
835    pieforms (http://www.catalyst.net.nz)
836            - mahara <unfixed>
837    
838    savant2 (http://phpsavant.com)
839            - egroupware <unfixed>
840    
841    rssparser (http://nwow.org)
842            - egroupware <unfixed>
843            - phpgroupware <unfixed>
844    
845    lcms
846            - openjdk-6 <unfixed> (fork)
847    
848    libphp-phplayersmenu
849            - diogenes <unfixed>
850            - phpldapadmin <unfixed>
851    
852    libphp-pclzip
853            - docvert <unfixed>
854            - moodle <unfixed>
855            - egroupware <unfixed>
856    
857    libphp-simplepie
858            - dokuwiki <unfixed>
859    
860    libphp-jpgraph
861            - egroupware <unfixed>
862    
863    php-simpletest
864            - moodle <unfixed>
865    
866    libpng
867            - iceweasel <not-affected> (uses xulrunner)
868            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
869            - iceape 1.0.13~pre080614i-0etch1 (embed)
870            - xulrunner 1.9.0.13-1 (embed)
871            [lenny] - xulrunner 1.9.0.11-0lenny1
872            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
873            - gamera 3.2.3-1 (embed)
874    
875    irssi
876            - silc-client <unfixed> (embed)
877            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
878    
879    extc
880            - mtasc <unfixed> (embed)
881            - haxe <unfixed> (embed)
882    
883    swflib
884            - mtasc <unfixed> (embed)
885            - haxe <unfixed> (embed)
886    
887    libitext-java
888            - bouncycastle 2.1.4-1 (embed)
889    
890    python-ply
891            - pyke <unfixed> (embed; bug #555363)
892            - pywbem <unfixed> (embed; bug #555364)
893            - sepolgen <unfixed> (embed; bug #555365)
894            - zope-textindexng3 <unknown> (embed)
895            - iceweasel <unknown> (embed)
896            - xulrunner <unknown> (embed)
897            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
898    
899    libdumbnet (libdnet upstream)
900            - nmap <unfixed> (fork)
901    
902    gcc-4.4
903            - gcc-mingw32 <unfixed> (embed)
904    
905    camlimages
906            - advi <unfixed> (static; bug #550441)
907    
908    memcached
909            - memcachedb <unfixed> (embed)
910    
911    yajl
912            - argyll <unfixed> (embed; bug #544223)
913            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
914    
915    libept
916            - adept <unfixed> (embed; bug #540649)
917    
918    libvorbis
919            - iceweasel <not-affected> (uses xulrunner)
920            - xulrunner <unfixed> (embed; bug #540959)
921            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
922            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
923    
924    cairo
925            - iceweasel <not-affected> (uses xulrunner)
926            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
927    
928    liboggz
929            - iceweasel <not-affected> (uses xulrunner)
930            - xulrunner <unfixed> (embed; bug #540949)
931            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
932            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
933    
934    
935    liboggplay
936            - iceweasel <not-affected> (uses xulrunner)
937            - xulrunner <unfixed> (embed; bug #540949)
938            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
939            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
940    
941    php-net-dnsbl
942            - serendipity <unfixed> (embed)
943    
944    php-onyx-rss
945            - serendipity <unfixed> (embed)
946    
947    php-text-wiki
948            - serendipity <unfixed> (embed)
949    
950    php-xml-rpc
951            - serendipity <unfixed> (embed)
952    
953    polarssl (does not have a shared library)
954            - pdkim <itp> (embed; bug #543150)
955            - xyssl <unfixed> (old-version)
956    
957    pidgin
958            - gaim <removed> (old-version)
959    
960    icu
961            - webkit 1.0.1-1 (embed; bug #547214)
962            - texlive-bin <unfixed> (fork)
963            NOTE: texlive upstream working with icu upstream to merge their changes
964    
965    cyrus-imapd-2.2
966            - kolab-cyrus-imapd <unfixed> (fork)
967            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
968    
969    python-cxx-dev
970            - freecad <unfixed> (embed; bug #547936)
971    
972    libzipios++-dev
973            - freecad <unfixed> (embed; bug #547941)
974    
975    linux-2.6
976            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
977            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
978            - kernel-source-2.6.8 <removed> (old-version)
979            - kernel-source-2.4.27 <removed> (old-version)
980            - kernel-source-2.4.24 <removed> (old-version)
981            - kernel-source-2.2.25 <removed> (old-version)
982            - kernel-source-2.2.20 <removed> (old-version)
983    
984    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
985            - kvm <unfixed> (embed) [./libfdt/*]
986    
987    qweb (not packaged)
988            - ajaxterm <unfixed>
989    
990    opensaml2
991            - opensaml <removed> (old-version)
992    
993    shibboleth-sp2
994            - shibboleth-sp <removed> (old-version)
995    
996    tuxonice-userui
997            - suspend2-userui <removed> (old-version)
998    
999    expat
1000            - w3c-libwww <removed> (embed; bug #551941)
1001            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1002            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1003            - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1004            - python2.4 <unfixed> (embed; bug #553403)
1005            - wxwindows2.4 <removed> (embed)
1006            - wxwidgets2.6 <unfixed> (embed)
1007            - wxwidgets2.8 <unfixed> (embed)
1008            - celementtree <unfixed> (embed)
1009            - audacity <unfixed> (embed)
1010            - matanza <unfixed> (embed)
1011            - tdom <unfixed> (embed)
1012            - udunits <unfixed> (embed)
1013            - apr-util 1.2 (embed)
1014            - ayttm <unfixed> (embed)
1015            - cableswig <unfixed> (embed)
1016            - cadaver <unfixed> (embed)
1017            - cmake <unfixed> (embed)
1018            - coin3 <unfixed> (embed)
1019            - gdcm <unfixed> (embed)
1020            - ghostscript <unfixed> (embed)
1021            - grmonitor <unfixed> (embed)
1022            - iceape <unfixed> (embed)
1023            - insighttoolkit <unfixed> (embed)
1024            - libparagui1.1 <unfixed> (embed)
1025            - paraview <unfixed> (embed)
1026            - poco <unfixed> (embed)
1027            - simgear <unfixed> (embed)
1028            - sitecopy <unfixed> (embed)
1029            - smart 1.0-1 (embed)
1030            [etch] - smart <unfixed> (embed)
1031            - swish-e <unfixed> (embed)
1032            - tla <unfixed> (embed)
1033            - vtk <unfixed> (embed)
1034            - wbxml2 <unfixed> (embed)
1035            - xmlrpc-c <unfixed> (embed)
1036            - iceweasel <unfixed> (embed)
1037            - kompozer <unfixed> (embed)
1038            - vxl <unfixed> (embed)
1039            - xulrunner <unfixed> (embed)
1040            - apache2 2.2 (embed)
1041            - texlive-bin <unfixed> (embed) [included twice]
1042            - vnc4 <unfixed> (embed)
1043            - xotcl <unfixed> (embed)
1044    
1045    xerces-c
1046            - xerces-c2 <unfixed> (old-version)
1047            - xerces27 <removed> (old-version)
1048    
1049    md5 (RSA's version; not the gnu version provided by coreutils)
1050            - w3c-libwww <removed> (embed; bug #551942)
1051            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1052    
1053    enet
1054            - sauerbraten <unfixed> (embed; #497194)
1055    
1056    eglibc
1057            - glibc <removed> (old-version)
1058    
1059    galib
1060            - gamera 3.2.3-1 (embed)
1061    
1062    configobj
1063            - bzr <unfixed> (embed; bug #555336)
1064            - elisa <unfixed> (embed; bug #555337)
1065            - gaupol <unfixed> (embed; bug #555338)
1066            - ipython <unfixed> (embed; bug #555339)
1067            - pida <unfixed> (embed; bug #555340)
1068            - psychopy <unfixed> (embed; bug #555341)
1069            - rest2web <unfixed> (embed; bug #555342)
1070            - auth2db <unknown> (embed)
1071            - dynagen <unknown> (embed)
1072            - iceweasel <unknown> (embed)
1073            - sabnzbdplus <unknown> (embed)
1074            - xulrunner <unknown> (embed)
1075            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1076    
1077    python-clientform
1078            - bibus <unfixed> (embed; bug #555332)
1079            - zope2.10 <unfixed> (embed; bug #555333)
1080            - zope2.11 <unfixed> (embed; bug #555334)
1081            - python-mechanize <unknown> (embed)
1082            - twill <unknown> (embed)
1083    
1084    python-mechanize
1085            - zope2.10 <unfixed> (embed; bug #555337)
1086            - zope2.11 <unfixed> (embed; bug #555338)
1087            - twill <unknown> (embed; bug #555339)
1088    
1089    pexpect
1090            - duplicity <unfixed> (embed; bug #555361)
1091            - hplip <unfixed> (embed; bug #555362)
1092            - smart <unfixed> (embed; bug #555363)
1093    
1094    pyparsing
1095            - bauble <unfixed> (embed; bug #555366)
1096            - boa-constructor <unfixed> (embed; bug #555367)
1097            - calibre <unfixed> (embed; bug #555368)
1098            - matplotlib <unfixed> (embed; bug #531024)
1099            - zhpy <unfixed> (embed; bug #555370)
1100            - polybori <unknown> (embed)
1101            - python-whoosh <unknown> (embed)
1102            - twill <unknown> (embed)
1103            - zope-textindexng3 <unknown> (embed)
1104    
1105    python-pysqlite2
1106            - python2.4 <unfixed> (embed; bug #553403)
1107            - python2.5 <unfixed> (embed; bug #553403)
1108    
1109    celementtree
1110            - python2.5 <unfixed> (embed)
1111            - smart 1.0-1 (embed)
1112            [etch] - smart <unfixed> (embed)
1113    
1114    elementtree
1115            - python2.5 <unfixed> (embed)
1116            - bzr <unfixed> (embed; bug #555343)
1117            - gedit <unfixed> (embed; bug #555344)
1118            - smart 1.0-1 (embed)
1119            [etch] - smart <unfixed> (embed)
1120            - solfege <unfixed> (embed; bug #555345)
1121            - w3af <unfixed> (embed; bug #555346)
1122            - python-qt4 <unknown> (embed)
1123            - sphinx <unknown> (embed)
1124            - python-nltk <itp> (embed)
1125    
1126    python2.5
1127            - python2.4 <unfixed> (old-version)
1128            - jython <unfixed> (embed)
1129            NOTE: embeds many stdlib modules
1130            - python-django <unfixed> (embed)
1131            NOTE: embeds stdlib modules: doctest, decimal
1132            - gamera 3.2.3-1 (embed)
1133            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1134            - boa-constructor <unfixed> (embed)
1135            NOTE: embeds stdlib modules: ConfigParser
1136            - nicotine <unfixed> (embed)
1137            NOTE: embeds stdlib modules: ConfigParser
1138            - museek+ <unfixed> (embed)
1139            NOTE: embeds stdlib modules: ConfigParser
1140            - vegastrike-data <unfixed> (embed)
1141            NOTE: embeds many stdlib modules
1142            - codespeak-lib <unfixed> (embed)
1143            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1144            - config-manager <unfixed> (embed)
1145            NOTE: embeds stdlib modules: optparse
1146            - jhbuild <unfixed> (embed)
1147            NOTE: embeds stdlib modules: optparse, subprocess
1148            - smart <unfixed> (embed)
1149            NOTE: embeds stdlib modules: optparse
1150            - pyprotocols <unfixed> (embed)
1151            NOTE: embeds stdlib modules: doctest
1152            - ruledispatch <unfixed> (embed)
1153            NOTE: embeds stdlib modules: doctest
1154            - distribute <unfixed> (embed)
1155            NOTE: embeds stdlib modules: doctest
1156            - python-setuptools <unfixed> (embed)
1157            NOTE: embeds stdlib modules: doctest
1158            - zope.testing <unfixed> (embed)
1159            NOTE: embeds stdlib modules: doctest
1160            - translate-toolkit <unfixed> (embed)
1161            NOTE: embeds stdlib modules: textwrap, contextlib
1162            - libtpclient-py <unfixed> (embed)
1163            NOTE: embeds stdlib modules: subprocess
1164            - grass <unfixed> (embed)
1165            NOTE: embeds stdlib modules: subprocess
1166            - coherence <unfixed> (embed)
1167            NOTE: embeds stdlib modules: uuid
1168            - python-django-extensions <unfixed> (embed)
1169            NOTE: embeds stdlib modules: uuid
1170            - setroubleshoot <unfixed> (embed)
1171            NOTE: embeds stdlib modules: uuid
1172            - linkchecker <unfixed> (embed)
1173            NOTE: embeds msgfmt.py script
1174            - imdbpy <unfixed> (embed)
1175            NOTE: embeds msgfmt.py script
1176            - kiwi <unfixed> (embed)
1177            NOTE: embeds msgfmt.py script
1178            - moin <unfixed> (embed)
1179            NOTE: embeds msgfmt.py script
1180            - plone3 <unfixed> (embed)
1181            NOTE: embeds msgfmt.py script
1182            - roundup <unfixed> (embed)
1183            NOTE: embeds msgfmt.py script
1184            - rednotebook <unfixed> (embed)
1185            NOTE: embeds msgfmt.py script
1186            - turbogears <unfixed> (embed)
1187            NOTE: embeds msgfmt.py script
1188            - elisa <unfixed> (embed)
1189            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1190            - calibre <unfixed> (embed)
1191            NOTE: embeds msgfmt.py script
1192            - mailman <unfixed> (embed)
1193            NOTE: embeds msgfmt.py script
1194            - python-docutils <unknown> (embed)
1195            NOTE: embeds stdlib modules: optparse, textwrap
1196            - python-imaging <unknown> (embed)
1197            NOTE: embeds stdlib modules: doctest
1198            - python-mechanize <unknown> (embed)
1199            NOTE: embeds stdlib modules: doctest
1200            - twill <unknown> (embed)
1201            NOTE: embeds stdlib modules: subprocess
1202            - zeroc-ice <unknown> (embed)
1203            NOTE: embeds stdlib modules: subprocess
1204            - wxwidgets2.8 <unknown> (embed)
1205            NOTE: embeds stdlib modules: subprocess
1206            - cycle <unknown> (embed)
1207            NOTE: embeds msgfmt.py script
1208            - deluge <unknown> (embed)
1209            NOTE: embeds msgfmt.py script
1210            - opendict <unknown> (embed)
1211            NOTE: embeds msgfmt.py script
1212            - openerp-client <unknown> (embed)
1213            NOTE: embeds msgfmt.py script
1214            - rapidsvn <unknown> (embed)
1215            NOTE: embeds msgfmt.py script
1216            - wammu <unknown> (embed)
1217            NOTE: embeds msgfmt.py script
1218            - gaphor <unknown> (embed)
1219            NOTE: embeds msgfmt.py script
1220            - pida <unknown> (embed)
1221            NOTE: embeds msgfmt.py script
1222            - python-formencode <unknown> (embed)
1223            NOTE: embeds msgfmt.py script
1224    
1225    argparse
1226            - twill <unfixed> (embed; bug #555347)
1227            - ipython <unfixed> (embed; bug #555348)
1228    
1229    coherence
1230            - elisa <unfixed> (embed; bug #555335)
1231    
1232    simpletal
1233            - plastex <unfixed> (embed; bug #555371)
1234    
1235    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1236            - postr <unfixed> (embed)
1237            - elisa <unfixed> (embed)
1238    
1239    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1240            - apertium-tolk <unfixed> (embed)
1241            - ipython <unfixed> (embed)
1242            - virtaal <unfixed> (embed)
1243    
1244    distribute
1245            - setuptools <removed> (old-version)
1246    
1247    rails
1248            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1249            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1250            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1251            - thin <unfixed> (embed) [./spec/rails_app/*]
1252            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1253            NOTE: be dangerous if developers are naively basing their code off of the examples
1254            NOTE: prototype.js is among the example files
1255    
1256    lucene2 (prototype.js is among the embeds in the following)
1257            - lucene <unfixed> (old-version)
1258            - pylucene <unfixed> (embed)
1259            - libpdfbox-java <unfixed> (embed)
1260            - libfontbox-java <unfixed> (embed)
1261            - libjempbox-java <unfixed> (embed)
1262            - solr <unfixed> (embed)
1263    
1264    unicode-data
1265            - syslinux <unfixed> (embed)
1266            - camomile <unfixed> (embed)
1267            - fribidi <unfixed> (embed)
1268            - m17n-db <unfixed> (embed)
1269            - sbcl <unfixed> (embed)
1270            - heimdal <unfixed> (embed)
1271            - icu <unfixed> (embed)
1272            - icu4j <unfixed> (embed)
1273            - krb5 <unfixed> (embed)
1274            - moodle <unfixed> (embed)
1275            - openldap <unfixed> (embed)
1276            - pike7.6 <unfixed> (embed)
1277            - samba <unfixed> (embed)
1278            - samba4 <unfixed> (embed)
1279            - cmucl <unfixed> (embed)
1280            - typo3-src <unfixed> (embed)
1281            - mauve <unfixed> (embed)
1282            - texlive-bin <unfixed> (embed)
1283            - ypsilon <unfixed> (embed)
1284            - jeuclid <unfixed> (embed)
1285            - charmap.app <unfixed> (embed)
1286            - clisp <unfixed> (embed)
1287            - gnulib <unfixed> (embed)
1288            - opensrs-client <unfixed> (embed)
1289            - saxonb <unfixed> (embed)
1290            - rails <unfixed> (embed)
1291    
1292    feedparser
1293            - rawdog <unfixed> (embed; bug #383422)
1294            - miro <unfixed> (embed; bug #555352)
1295            - calibre <unfixed> (embed; bug #555352)
1296            - freevo <unfixed> (embed; bug #555353)
1297            - pida <unfixed> (embed; bug #555354)
1298            - planet-venus <unfixed> (embed; bug #555355)
1299            - plone3 <unfixed> (embed; bug #555356)
1300            - exaile <unknown> (embed)
1301            - screenlets <unknown> (embed)
1302            NOTE: included twice
1303    
1304    agg:
1305            - matplotlib <unfixed> (embed: bug #377271)
1306            - contextfree <unfixed> (embed)
1307            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1308            - exactimage <unfixed> (embed)
1309            - python-enable <unfixed> (embed)
1310            - mapnik 0.5.1-3 (embed)
1311            NOTE: links statically to agg, but shared library is not available (bug #377271)
1312    
1313    vtk
1314            - paraview <unfixable> (embed; bug #495426)
1315    
1316    txt2tags
1317            - rednotebook <unfixed> (embed)
1318    
1319    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1320            - gajim <unfixed> (embed)
1321            - emesene <unfixed> (embed)
1322            - convirt <unfixed> (embed)
1323            - pida <unfixed> (embed)
1324            - rednotebook <unfixed> (embed)
1325    
1326    horde3 (prototype.js is among the embeds in the following)
1327            - mnemo2 <unfixed> (embed)
1328            - nag2 <unfixed> (embed)
1329    
1330    cimg
1331            - gmic <itp> (embed)
1332    
1333    mootools
1334            - gmic <itp> (embed)

Legend:
Removed from v.7923  
changed lines
  Added in v.13248

  ViewVC Help
Powered by ViewVC 1.1.5