/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 13480 - (show annotations) (download)
Mon Dec 7 12:22:48 2009 UTC (3 years, 5 months ago) by jwilk-guest
File size: 44034 byte(s)
orpie used to embed ocamlgsl.
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy, <unfixed>, <removed>,
14 <itp>, <not-affected>, <unknown> if the version number can not
15 be determined, or <unfixable> for unavoidable cases (e.g., forks
16 that add real value)
17 sort: static (linking statically against a lib)
18 embed (embedding a copy of the library into another source package)
19 fork (the package is not just embedding code but it is a fork and
20 thus might share parts of the source code)
21 old-version (the package is an older version of essentially
22 the same code)
23
24 The srcpkg might be some string to identify the code if there is no
25 specific source package.
26
27 Everything up to the next line is ignored.
28 ---BEGIN
29 xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30 NOTE: Fixed packages link to poppler library unless otherwise noted
31 - pdftohtml <unknown>
32 [sarge] - pdftohtml <unfixed>
33 [etch] - pdftohtml <unfixed>
34 NOTE: has been replaced by poppler-utils
35 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36 - texlive-base 3.0-12 (embed)
37 - texlive-bin 2007-1 (embed)
38 NOTE: links to poppler
39 - koffice <unfixed> (embed; bug #436163)
40 - libextractor 0.5.12-1 (embed)
41 NOTE: libextractor is using its own pdf decoder now
42 - ipe <unfixed> (embed)
43 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44 - ruby-gnome2 <unknown> (embed)
45 NOTE: copy only present in source but links to poppler
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <unfixed> (embed; bug #551293)
48 - poppler <unfixable> (fork)
49
50 ppmd
51 - libcomplearn-mod-ppmd <unfixed> (fork)
52 NOTE: discussion in #458152
53
54 libevent
55 - transmission 1.71-1 (embed; bug #529372)
56
57 lrmi
58 - read-edid 2.0.0-1 (embed; bug #495131)
59 - s3switch <unfixed> (embed)
60 - xresprobe <unfixed> (embed)
61 - zhcon <unfixed> (embed)
62
63 peercast
64 - gnome-peercast <removed> (embed)
65 [etch] - gnome-peercast <unfixed> (embed)
66
67 silc-toolkit
68 - silc-client 1.1~beta6-1 (embed)
69
70 icclib
71 - ghostscript <unfixed> (embed)
72 - argyll <unfixed> (embed)
73
74 dietlibc
75 - ccontrol 0.9.1+20071204-1 (static)
76
77 libmikmod
78 - sdl-mixer1.2 <unfixed> (embed)
79 TODO: report bug
80
81 libiax
82 - iaxmodem <unfixable> (embed; bug #548885)
83
84 spandsp
85 - iaxmodem <unfixable> (embed; bug #548885)
86
87 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
88 - dpkg <unfixed> (static)
89 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
90 - rsync <unfixed> (embed)
91 NOTE: somehow derived code base
92 - mono <unfixed> (embed)
93 TODO: check mozilla
94 - Linux kernels <unfixed> (embed)
95 - pvpgn 1.7.8-2 (embed)
96 - mrtg 2.12.2-1 (embed)
97 - rpm <unknown> (embed)
98 NOTE: pinged anibal since when rpm was fixed
99 - tuxcmd-modules <unfixed> (embed)
100 - zsync <unfixed>
101 - tra <unfixed>
102 - sash <unfixed>
103 - nsis <unfixed>
104 - mseide-msegui <unfixed>
105 NOTE: mseide
106 - mirrordir <unfixed>
107 - poco <unfixed>
108 - klibc <unfixed>
109 - ghostscript <unfixed>
110 - freeimage <unfixed>
111 - clamav <unfixed> (fork)
112 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
113 - tuxonice-userui <unfixed>
114 - plt-scheme <unfixed>
115 - perl <unfixed>
116 - paraview <unfixed>
117 - gcvs <unfixed>
118 - dump <unfixed>
119 - aide <unfixed> (static)
120 - dar <unfixed> (static)
121 - avfs <unfixed>
122 - fpc <unfixed>
123 - winff <unfixed>
124 NOTE: inherited from fpc, see #472304
125 - lazarus <unfixed>
126 NOTE: inherited from fpc, see #472304
127 - erlang <unfixed> (embed)
128 - gamera 3.2.3-1 (embed)
129 - python2.4 <unfixed> (embed; bug #553403)
130 - python2.5 <unfixed> (embed; bug #553403)
131
132 dulwich
133 - hg-git 0.1.0-1 (embed; bug #541996)
134
135 libvigraimpex
136 - hugin <unfixed> (embed; bug #542259)
137 - enblend-enfuse <unfixed> (embed; bug #542258)
138 - gamera 3.2.3-1 (embed)
139
140 libbz2
141 - dpkg <unfixed> (static)
142
143 libgadu
144 - centerim <unfixed> (embed; bug #559783)
145 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
146 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
147 - kdenetwork 4:3.3.2-5 (embed)
148 NOTE: from kdenetwork: kopete
149 - ekg 1:1.8~rc0-1 (embed)
150 - kadu 0.6.0.2-3 (embed; bug #504430)
151 - gadu <itp> (embed)
152
153 xmlrpc (which package is the "origin" of this code?)
154 - drupal <unfixed> (embed)
155 - phpgroupware <unfixed> (embed)
156 - egroupware <unfixed> (embed)
157 - phpwiki <unfixed> (embed)
158 - php4 <unfixed> (embed)
159 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
160
161 shtool (affects build-time only)
162 - mysql-ocaml <unfixed> (embed)
163 - php4 <unfixed> (embed)
164
165 iceape
166 - iceweasel <unfixed> (fork)
167 - icedove <unfixed> (fork)
168 - xulrunner <unfixed> (fork)
169 - kompozer <unfixed> (embed; bug #532168)
170 - galeon <unfixed> (fork)
171 - epiphany-browser <unfixed> (fork)
172 - conkeror <unfixed> (fork)
173 - kazehakase <unfixed> (fork)
174
175 xli
176 - xloadimage <unfixed> (embed)
177
178 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
179 - openmotif <unfixed> (embed)
180 - libxpm <unfixed> (embed)
181
182 kerberized apps with BSD origin
183 - krb4 <removed> (embed)
184 - krb5 <unfixed> (embed)
185 - heimdal <unfixed> (embed)
186
187 grip (which pkg is the origin?)
188 - libcdaudio <unfixed>
189 - grip <unfixed>
190 - gnome-vfs <unfixed>
191 TODO: check vfs2 as well
192
193 fudforum
194 [etch] - phpgroupware <unfixed> (embed)
195 NOTE: phpgroupware-fudforum
196 [sarge] - egroupware-fudforum <removed> (embed)
197
198 libbsd
199 - rdate 1:1.2-3 (embed)
200 - atheme-services <unfixed>
201 - libbsd-arc4random-perl <unfixed>
202 - isakmpd <unfixed>
203 - bsdgames <unfixed> (embed)
204 - bsd-mailx <unfixed> (embed)
205 - netcat-openbsd <unfixed> (embed; bug #550611)
206 - openssh <unfixed> (embed)
207 - unworkable <unfixed> (embed)
208
209 cvs
210 - gcvs <unfixed> (embed)
211 NOTE: see cvsunix/src in tarball
212
213 pcre3
214 - php4 <unknown> (embed)
215 - analog 2:5.23-0woody1 (embed)
216 - goffice <unfixed> (embed)
217 NOTE: libgoffice-*
218 - vfu 4.06-4.1 (embed; bug #450754)
219 - tf5 5.0beta7-1 (embed)
220 - monotone 0.43-1 (embed)
221 NOTE: this only affects versions >= 0.37
222 - glib2.0 2.15.2-1 (embed)
223 - apache2 2.0.53-4 (embed)
224 - exim4 4.10-0.srh20.12 (embed)
225 - yacas <unfixed> (embed)
226 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
227 - gtamsanalyzer.app 0.42-5 (embed)
228 - tin 980117-1 (embed)
229 - kazehakase 0.5.2-1
230 - webkit 1.0.1-1 (embed)
231 - qt4-x11 <unfixed> (embed)
232 NOTE: embedded via webkit copy
233 - erlang <unfixed> (embed)
234
235 tiff
236 - wxwindows2.4 2.2.1 (embed)
237 - gamera 3.2.3-1 (embed)
238
239 uudeview
240 - libconvert-uulib-perl <unfixed> (embed)
241 - pan <unfixed> (embed)
242
243 sqlite (not affected by security vulnerabilities so far)
244 - amarok <unfixed> (embed)
245 - monotone 0.43-1 (embed)
246 - iceweasel <unfixed> (embed)
247 - heimdal <unfixed> (embed; bug #559616)
248
249 util-linux/mount
250 - loop-aes-utils <unfixed> (embed)
251 NOTE: contains code from util-linux' mount in the mount-aes-udeb
252
253 sylpheed
254 - sylpheed-claws <unfixed> (fork)
255
256 phpsysinfo
257 - egroupware <unfixed> (embed)
258 - phpgroupware <unfixed> (embed)
259
260 phpldapadmin
261 [sarge] - egroupware <unfixed> (embed)
262 NOTE: removed from egroupware after sarge
263
264 chmlib
265 - kchmviewer <unknown> (embed)
266
267 ffmpeg (libavcodec/libavformat)
268 - mplayer 1.0~rc2-14 (embed; bug #395252)
269 - kino 1.0.0-1
270 - vlc <not-affected> (Links dynamically since initial release)
271 - smilutils 0.3.0-10
272 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
273 - motion 3.1.19-1
274 - gstreamer0.10-ffmpeg 0.10.3-2
275 - xmovie <removed> (static)
276 TODO: gimp-gap (potentially using ffmpeg code as well)
277 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
278 - audacity 1.3.7-2 (embed; bug #512278)
279
280 faad2
281 - mplayer 1.0~rc2-20 (embed)
282 - avifile <unfixed> (embed; bug #538750)
283 - ffmpeg-debian <removed> (old-version)
284
285 libmad (MPEG decoding lib)
286 - xine-lib <unfixed> (embed)
287 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
288 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
289
290 libdts
291 - xine-lib <unfixed> (embed)
292
293 flac
294 - xine-lib <unfixed> (embed)
295
296 liba52
297 - a52dec <unfixed> (embed)
298 - xine-lib <unfixed> (embed)
299
300 libmpeg2
301 - mpeg2dec <unfixed> (embed)
302 - xine-lib <unfixed> (embed)
303
304 libntlm
305 - wget <unfixed> (fork; bug #550436)
306 - curl <unfixed> (fork; bug #550437)
307 - cntlm <unfixed> (fork; bug #550438)
308
309 uw-imap
310 - pine <unfixed> (embed)
311 - alpine <unfixed> (embed)
312
313 imagemagick
314 - graphicsmagick <unfixed> (fork)
315
316 python-urlgrabber
317 - mercurial <unfixed> (embed; bug #531062)
318 - w3af <unfixed> (embed; bug #555372)
319 [experimental] - harvestman <unfixed> (embed; bug #555373)
320
321 beautifulsoup
322 - python-mechanize <unfixed> (embed; bug #555349)
323 - zope2.11 <unfixed> (embed; bug #555350)
324 - twill <unknown> (embed)
325
326 halibut
327 - nsis <unfixed> (fork)
328
329 libghttp
330 - hotway <unfixed> (embed)
331
332 libsndfile
333 - ardour 1:2.7.1-1 (embed)
334
335 glibmm2.4
336 - ardour 1:2.7.1-1 (embed)
337
338 libgnomecanvasmm2.6
339 - ardour 1:2.7.1-1 (embed)
340
341 libsigc++-2.0
342 - ardour 1:2.7.1-1 (embed)
343
344 soundtouch
345 - ardour 1:2.7.1-1 (embed)
346
347 libmms
348 - xine-lib <unfixed> (embed)
349 - mimms <unfixed> (embed)
350
351 fckeditor
352 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
353 - moin 1.8.2-2 (embed; bug #452599)
354 - karrigell <removed> (embed; bug #452598)
355 - gforge 4.6.99+svn6225-1 (embed)
356 - request-tracker3.8 <unfixed> (embed)
357
358 ipatlas (not packaged in Debian)
359 - moodle <unfixed> (embed; bug #507185)
360
361 libphp-phpmailer
362 - moodle <unfixed> (embed; bug #507185)
363 - mahara <unfixed> (embed)
364 - symfony <unfixed> (embed)
365 [etch] - phpgroupware <unfixed> (embed)
366 NOTE: phpgroupware-felamimail is only in etch
367 - egroupware <unfixed> (embed; bug #504283)
368 - glpi <unfixed>
369
370 htmlArea (not packaged in Debian)
371 - moodle <unfixed> (embed)
372
373 giflib
374 - wine <unfixed> (embed; bug #466181)
375
376 bennu (not packaged in Debian, http://bennu.sourceforge.net)
377 - moodle <unfixed> (embed)
378
379 smarty
380 - moodle 1.8.2-2 (embed; bug #471158)
381 - gallery2 2.2.5-2 (embed; bug #471160)
382 - mahara 0.9.2-2 (embed; bug #471201)
383 - gosa 2.4beta1-1 (embed; bug #471200)
384
385 TinyMCE
386 - wordpress 2.5.1-3 (embed; bug #478257)
387 - moodle <unfixed> (embed; bug #507185)
388 - knowledgeroot <unfixed> (embed)
389 - joomla <itp> (bug #326398)
390
391 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
392 - scite <unfixed> (embed)
393 - qscintilla <unfixed> (embed)
394 - qscintilla2 <unfixed> (embed)
395 - geany <unfixed> (fork)
396 - anjuta <unfixed> (embed)
397
398 libphp-adodb
399 - moodle <unfixed> (embed; bug #507185)
400 NOTE: also AdoDB-XML Schema
401 - gallery2 <unfixed> (embed)
402 - phppgadmin <unfixed> (embed)
403 - egroupware <unfixed> (embed)
404 - phpwiki <unfixed> (embed)
405 - torrentflux 2.0beta1-2 (embed)
406 - ipplan <unfixed> (embed)
407 - typo3-src <unfixed> (embed)
408 - cacti <unknown> (embed)
409 [sarge] - cacti <unfixed> (embed)
410 NOTE: dependency exists, but internal version is used
411 - gforge 4.7~rc2-6 (embed)
412 - mahara <unfixed> (embed)
413
414 gzip
415 - linux-kernel <unfixed> (embed)
416 NOTE: lib/inflate.c
417 - klibc <unfixed> (embed)
418 NOTE: based on linux-kernel gzip code
419 - busybox <unfixed> (embed)
420
421 neon
422 - cadaver 0.22.3+debian-1 (embed; bug #188381)
423 - gnome-vfs2 <unfixed> (embed; bug #395874)
424 [etch] - litmus <unfixed> (embed; #395875)
425 - litmus <removed> (embed; #395875)
426 [sarge] - screem <unfixed> (embed)
427 - sitecopy 1:0.16.3-5 (embed; bug #395876)
428 [etch] - tla <unfixed> (embed; bug #395877)
429 [sarge] - tla <unfixed> (embed; bug #395877)
430
431 libmodplug
432 - gst-plugins-bad0.10 <unfixed> (embed)
433
434 libvncserver
435 - vino <unfixed> (embed)
436
437 putty
438 - filezilla <unfixed> (embed)
439
440 tinyxml (not packaged in Debian; itp bug #531968)
441 - filezilla <unfixed>
442 - crystalspace <unfixed> (embed)
443 - libwfut <unfixed> (embed)
444 - rarian <unfixed> (embed)
445 - bulletml <unfixed> (embed)
446 - pokerth <unfixed> (embed)
447 - qutecom <unfixed> (embed)
448 - sofa-framework <unfixed> (embed)
449 - yate <unfixed> (embed)
450 - antigrav <unfixed> (embed)
451 - balder2d <unfixed> (embed)
452 - cal3d <unfixed> (embed)
453 - criticalmass <unfixed> (embed)
454 - ember <unfixed> (embed)
455 - epiphany <unfixed> (embed)
456 - gambit <unfixed> (embed)
457 - noiz2sa <unfixed> (embed)
458 - ogre <unfixed> (embed)
459 - opencity <unfixed> (embed)
460 - openmovieeditor <unfixed> (embed)
461 - pouetchess <unfixed> (embed)
462 - tecnoballz <unfixed> (embed)
463 - trigger-rally <unfixed> (embed)
464 - xmoto <unfixed> (embed)
465 - mapnik <unknown> (embed)
466 NOTE: uses a different XML parser by default
467 - rrootage 0.23a-6 <embed>
468 NOTE: links to libbulltetml
469 - boson <unknown> (embed)
470 NOTE: the embedded code is unused
471
472 gv
473 - evince <unfixed> (embed)
474 NOTE: ps/ tree from gv 3.5.8
475 NOTE: evince-gtk is affected (a component of evince source package)
476
477 libXbae
478 - paw <removed> (embed)
479 [etch] - paw <unfixed> (embed)
480
481 libgtkhtml
482 - claws-mail-extra-plugins <unfixed> (fork)
483
484 libXaw
485 - paw <removed> (embed)
486 [etch] - paw <unfixed> (embed)
487 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
488
489 libgd2
490 - graphviz <unfixed> (embed)
491 NOTE: lib/gd seems to be 2.0.33
492 - wml <unfixed> (embed)
493 - libwmf <unfixed> (embed)
494 NOTE: derived from gd 1.6.3
495
496 rar
497 - unrar-nonfree <unfixed> (embed)
498
499 unrar-free (maybe this code is derived from the original rar, too?)
500 - clamav <unfixed> (embed)
501 NOTE: seems to be disabled in default config
502
503 mplayer (DirectMedia Object loader)
504 - xine-lib <unfixed> (embed)
505 NOTE: src/libw32dll/
506 - vlc <unfixed> (embed)
507 NOTE: modules/codec/dmo/
508 - mplayer 1.0~rc2-20 (embed)
509
510 libwpd (WordPerfect converter)
511 - openoffice.org <unfixed> (embed)
512
513 fsplib (http://sourceforge.net/projects/fsp/)
514 - gftp <unfixed> (embed)
515 NOTE: lib/fsplib version 0.3
516
517 sprng
518 - tree-puzzle <unfixed> (embed)
519
520 librpcsecgss
521 - krb5 <unfixed> (embed)
522
523 jasper
524 - ghostscript 8.70~dfsg-2+b1 (embed)
525 - ghostscript <unfixed> (static)
526
527 libiris
528 - psi <unfixed> (embed)
529 - kdenetwork <unfixed> (embed)
530 NOTE: kopete embeds libiris but links dynamically to libidn
531 - kdegames <unfixed> (embed)
532 NOTE: ksirk/kde4
533
534 libidn
535 - monotone 0.43-1 (embed)
536 - psi <unfixed> (embed)
537 NOTE: psi embeds libiris which embeds libidn
538 - kdegames <unfixed> (embed)
539 NOTE: kdegames/kde4 embeds libiris which embeds libidn
540
541 liblua
542 - monotone 0.43-1 (embed)
543 - nmap 5.00-1 (embed; bug #527997)
544 [lenny] - nmap <unfixed> (embed; bug #527997)
545 - ocropus <unfixed> (embed)
546
547 libbotan
548 - monotone 0.43-1 (embed)
549
550 NetXX
551 - monotone 0.43-1 (embed)
552
553 libgc
554 - mono <unfixed> (embed)
555
556 lzma
557 - p7zip <unfixed> (embed)
558 - xz-utils <unfixed> (fork)
559
560 lzo
561 - grub2 <unfixed> (embed)
562
563 yassl
564 - mysql-dfsg-5.0 <unfixed> (embed)
565
566 pax code
567 - tar <unfixed> (embed)
568 - cpio <unfixed> (embed)
569
570 t1lib
571 - tetex-bin 2.0.2-1 (embed)
572 - texlive-bin <unknown> (embed)
573
574 guichan
575 - boswars <unfixed> (embed)
576 NOTE: maintainer notified us, working on it
577
578 tolua
579 - boswars <unfixed> (embed)
580 NOTE: maintainer notified us, working on it
581 - ocropus <unfixed> (embed)
582 - freeciv <unfixed> (embed)
583
584 asio-dev
585 - luxrender <removed> (embed)
586
587 xine-lib
588 - vlc <unfixed> (embed)
589 NOTE: only parts included in modules/access/rtsp
590
591 netpbm
592 - tcl8.3 <unfixed> (embed)
593 - tcl8.4 <unfixed> (embed)
594 - tcl8.5 <unfixed> (embed)
595 NOTE: generic/tkImgGIF.c
596
597 tk8.5
598 - tk8.0 <removed> (old-version)
599 - tk8.3 <unfixed> (old-version)
600 - tk8.4 <unfixed> (old-version)
601 - perl-tk <unfixable> (fork)
602
603 samba
604 - mc 2:4.6.2~git20080311-1 (embed)
605 NOTE: maintainer is aware of this, currently searching a solution
606
607 plib1.8.4c2
608 - boson <unfixed> (fork)
609 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
610
611 fribidi
612 - quesoglc <unfixed> (embed)
613 NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
614
615 glew
616 - quesoglc <unfixed> (embed; bug #489341)
617 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
618 - trigger <unfixed> (embed)
619 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
620 - trigger-rally <unfixed> (embed)
621 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
622
623 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
624 - transcend <unfixed> (embed)
625 - cultivation <unfixed> (embed)
626 - passage <unfixed> (embed)
627 - gravitation <unfixed> (embed)
628
629 tar
630 - libarchive <unfixed> (embed)
631 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
632
633 cpio
634 - libarchive <unfixed> (embed)
635 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
636
637 webkit
638 - qt4-x11 <unfixed> (embed; bug #479851)
639 - kdelibs <unfixed> (old-version)
640 - kde4libs <unfixed> (fork)
641
642 ftgl
643 - blender 2.46+dfsg-1 (embed)
644
645 wv
646 - abiword <unfixed>
647
648 qemu
649 - kvm <unfixed> (embed; bug #543159)
650 - xen-3 <unfixed> (embed)
651 - xen-unstable <unfixed> (embed)
652
653 vgabios
654 - kvm <unfixed> (embed; bug #489442)
655
656 bochs
657 - kvm <unfixed> (embed; bug #489442)
658
659 speex
660 - vorbis-tools <unfixed> (embed)
661 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
662 - gst-plugins-good0.10 <unfixed> (embed)
663 - xine-lib <unfixed> (embed)
664 - libfishsound <unfixed> (embed)
665 - libannodex <unfixed> (embed)
666 - vlc <unfixed> (embed)
667 - xmms-speex <unfixed> (embed)
668 - libsdl-sound1.2 <unfixed> (embed)
669 - sweep <unfixed> (embed)
670
671 libreadline
672 - magic <itp> (old-version)
673
674 opcode
675 - ode <unfixed> (embed)
676 NOTE: opcode is not a package in debian, it is just embedded
677 NOTE: http://www.codercorner.com/Opcode.htm
678
679 gimpact
680 - ode <unfixed> (embed)
681 NOTE: gimpact is not a package in debian, it is just embedded
682 NOTE: http://gimpact.sf.net
683
684 mochikit
685 - mahara <unfixed> (embed)
686 NOTE: they require extra patches, still unmerged upstream
687 - ntop <unfixed> (embed)
688 - coherence 0.6.2-1 (embed)
689 - paste <unfixed> (embed)
690 - turbogears <unfixed> (embed)
691 - plone3 <unfixed> (embed)
692 - xulrunner <unfixed> (embed)
693 - libjifty-plugin-chart-perl <unfixed> (embed)
694 - sabnzbdplus <unfixed> (embed)
695 - tgmochikit <unfixed> (embed)
696
697 prototypejs
698 - netbeans-ide 6.0.1+dfsg-2 (embed)
699 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
700 - webcit <unfixed> (embed; bug #555219)
701 - asterisk 1:1.6.2.0~rc3-1 (embed)
702 - libjson-ruby 1.1.4-1 (embed; bug #555224)
703 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
704 - horde3 <unfixed> (embed)
705 - knowledgeroot <unfixed> (embed; bug #555230)
706 - mediatomb <unfixed> (embed; bug #555233)
707 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
708 - ebug-http <unfixed> (embed; bug #555236)
709 - phpgedview <removed> (embed)
710 - poker-network <unfixed> (embed; bug #555238)
711 - rails 2.1.0-6 (embed)
712 - wordpress 2.5.0-2 (embed; bug #555243)
713 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
714 TODO: search through all of the other zope packages
715 - ampache 3.4.1-2 (embed)
716 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
717 - hobix 0.5~svn20070319-4 (embed; bug #555247)
718 - zabbix 1.6.6-4 (embed; bug #555250)
719 - chora2 <unfixed> (embed; bug #555253)
720 - gollem <unfixed> (embed; bug # 555254)
721 - jscropperui 1.2.1-1 (embed; bug #555257)
722 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
723 - ingo1 <unfixed> (embed; bug #555261)
724 - kronolith2 <unfixed> (embed; bug #555262)
725 - activeldap <unfixed> (embed)
726 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
727 - mantis <unfixed> (embed; bug #555265)
728 - otrs2 2.3.4-6 (embed; bug #555267)
729 - webcalendar <unfixed> (embed; bug #555269)
730 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
731 - jifty 0.90519-1 (embed; bug #555271)
732 - jquery <unfixed> (embed; bug #555272)
733 - passenger 2.2.5debian1-1 (embed; bug #555273)
734 - plone3 <unfixed> (embed; bug #555275)
735 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
736 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
737 - xulrunner <unfixed> (embed)
738 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
739
740 gdb
741 - insight <unfixed> (embed)
742
743 e2fsprogs
744 - ldiskfsprogs <unfixable> (fork)
745
746 quazip (not packaged in Debian)
747 - qcake <unfixed> (embed)
748 NOTE: starting with upstream version 0.6.4
749
750 exo
751 - pcmanfm <unfixed> (embed; bug #499677)
752 NOTE: slightly modified source code
753
754 java
755 - openjdk-6 <unfixed>
756 - sun-java5 <unfixed>
757 - sun-java6 <unfixed>
758
759 libphp-snoopy
760 - ampache 3.4.1-2 (embed; bug #504169)
761 - gforge 4.6.99+svn6094-2 (embed)
762 - mahara 1.0.5-2 (embed; bug #504170)
763 - pixelpost 1.7.1-5 (embed; bug #504171)
764 - mediamate 0.9.3.6-5 (embed; bug #504172)
765 - opendb <removed> (embed; bug #504173)
766 [etch] - opendb <unfixed> (embed; bug #504173)
767 - wordpress 2.5.1-9 (embed; bug #443948)
768 - moodle <unfixed> (embed; bug #507185)
769 [etch] - phpgroupware <unfixed> (embed)
770 NOTE: phpgroupware-felamimail
771 - magpierss 0.72-3 (embed; bug #431089)
772
773 jquery
774 - zekr <unfixed> (embed)
775 - wordpress <unknown> (embed)
776 - yocto-reader <unfixed> (embed)
777 - textpattern <unfixed> (embed)
778 - genshi 0.5.1-1 (embed)
779 NOTE: compressed file under examples/ dir
780 - prewikka <unfixed> (embed)
781 - libramaze-ruby <unfixed> (embed)
782 - drupal5 <unfixed> (embed)
783 - b2evolution <unfixed> (embed)
784 - wesnoth <unfixed> (embed)
785
786 tablesorter (jquery plugin, not packaged yet)
787 - wesnoth <unfixed> (embed)
788
789 kses
790 - wordpress <unfixed> (embed; bug #504242)
791 NOTE: their copy has all methods renamed to wp_<foo>
792 NOTE: kses isn't in Debian, RFP: #504240
793 - moodle <unfixed> (embed; bug #507185)
794 - egroupware <unfixed> (embed)
795
796 magpierss
797 - wordpress <unfixed> (embed; bug #504242)
798 - moodle <unfixed>
799
800 php-gettext
801 - wordpress 2.8.4-1 (embed; bug #504242)
802
803 libphp-ixr (name may change, it is the Incutio XML-RPC)
804 - wordpress <unfixed> (embed; bug #504242)
805 NOTE: libphp-ixr isn't in Debian, RFP: #504236
806 - dokuwiki <unfixed> (embed)
807 - textpattern <unfixed> (embed)
808
809 libphp-cas
810 - glpi <unfixed> (embed)
811 - moodle <unfixed> (embed; bug #505984)
812
813 scriptaculous (prototype.js is among the embeds in the following)
814 - glpi <unfixed> (embed)
815 - libaws <unfixed> (embed; bug #555222)
816 - op-panel <unfixed> (embed)
817 - symfony <unfixed> (embed)
818 NOTE: maintainer says there are extra incompatible changes required
819 - pixelpost 1.7.1-6 (embed)
820 - webhelpers <unfixed> (embed)
821 - qwik <unfixed> (embed; bug #555241)
822 - smokeping <unfixed> (embed)
823 - turba2 <unfixed> (embed)
824 - typo3-src 4.2.3-1 (embed)
825 - request-tracker3.6 <unfixed> (embed)
826 - request-tracker3.8 <unfixed> (embed)
827 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
828 - wordpress 2.5.0-2 (embed)
829 - libhtml-prototype-perl 1.48-3 (embed)
830
831 libmarkdown-php
832 - moodle <unfixed> (embed; bug #507185)
833 - pixelpost 1.7.1-6 (embed)
834
835 php-openid
836 - wordpress-openid <itp> (embed)
837
838 geshi
839 - dokuwiki 0.0.20080505-3.1 (embed)
840 - pgfouine 1.0-1.1 (embed)
841 - websvn 2.1.0-1 (embed)
842
843 webcalendar
844 - gforge 4.7~rc2-6 (embed; bug #504758)
845
846 libical
847 - kdepim <unfixed> (fork)
848 - kdepimlibs <unfixed> (fork)
849 NOTE: fixed in KDE4 post 4.1.x series
850 - claws-mail-extra-plugins <unfixed> (fork)
851
852 libltdl3
853 - kdelibs <unfixed> (embed)
854 NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
855 - synfig <unfixed> (embed)
856
857 harfbuzz
858 - qt4-x11 <unfixed> (embed)
859
860 libzip
861 - php5 <unfixed> (fork)
862 - odt2txt <unfixed> (embed; bug #523808)
863
864 json.php (not packaged; should be replaced with php's built-in functions)
865 - moodle <unfixed>
866 - yui <unfixed>
867 - gallery2 <unfixed>
868 - dokuwiki <unfixed>
869 - typo3-src <unfixed>
870
871 php-fpdf
872 - tcpdf <itp> (fork)
873 - moodle <unfixed>
874 - phpwiki <unfixed>
875 - egroupware <unfixed>
876 - ldap-account-manager <unfixed> (fork)
877
878 tcpdf (itp: #495985)
879 - moodle <unfixed>
880 - phpmyadmin <unfixed>
881
882 typo3
883 - moodle <unfixed>
884
885 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
886 - moodle <unfixed>
887 - gosa <unfixed>
888
889 php-ole (itp: #487558)
890 - moodle <unfixed>
891
892 pieforms (http://www.catalyst.net.nz)
893 - mahara <unfixed>
894
895 savant2 (http://phpsavant.com)
896 - egroupware <unfixed>
897
898 rssparser (http://nwow.org)
899 - egroupware <unfixed>
900 - phpgroupware <unfixed>
901
902 lcms
903 - openjdk-6 <unfixed> (fork)
904
905 libphp-phplayersmenu
906 - diogenes <unfixed>
907 - phpldapadmin <unfixed>
908
909 libphp-pclzip
910 - docvert <unfixed>
911 - moodle <unfixed>
912 - egroupware <unfixed>
913
914 libphp-simplepie
915 - dokuwiki <unfixed>
916
917 libphp-jpgraph
918 - egroupware <unfixed>
919
920 php-simpletest
921 - moodle <unfixed>
922
923 libpng
924 - iceweasel <not-affected> (uses xulrunner)
925 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
926 - iceape 1.0.13~pre080614i-0etch1 (embed)
927 - xulrunner 1.9.0.13-1 (embed)
928 [lenny] - xulrunner 1.9.0.11-0lenny1
929 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
930 - gamera 3.2.3-1 (embed)
931
932 irssi
933 - silc-client <unfixed> (embed)
934 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
935
936 extc
937 - mtasc <unfixed> (embed)
938 - haxe <unfixed> (embed)
939
940 swflib
941 - mtasc <unfixed> (embed)
942 - haxe <unfixed> (embed)
943
944 libitext-java
945 - bouncycastle 2.1.4-1 (embed)
946
947 python-ply
948 - pyke <unfixed> (embed; bug #555363)
949 - pywbem <unfixed> (embed; bug #555364)
950 - sepolgen <unfixed> (embed; bug #555365)
951 - zope-textindexng3 <unknown> (embed)
952 - iceweasel <not-affected> (uses xulrunner)
953 - xulrunner <unknown> (embed)
954 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
955
956 libdumbnet (libdnet upstream)
957 - nmap <unfixed> (fork)
958
959 gcc-4.4
960 - gcc-mingw32 <unfixed> (embed)
961
962 camlimages
963 - advi <unfixed> (static; bug #550441)
964
965 memcached
966 - memcachedb <unfixed> (embed)
967
968 yajl
969 - argyll <unfixed> (embed; bug #544223)
970 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
971
972 nusoap
973 - gforge 4.8.2-1 (embed)
974
975 libept
976 - adept <unfixed> (embed; bug #540649)
977
978 libvorbis
979 - iceweasel <not-affected> (uses xulrunner)
980 - xulrunner <unfixed> (embed; bug #540959)
981 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
982 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
983 - iceape <unfixed> (embed)
984 [etch] - iceape <not-affected> (introduced in 2.0)
985 [lenny] - iceape <not-affected> (introduced in 2.0)
986
987 cairo
988 - iceweasel <not-affected> (uses xulrunner)
989 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
990
991 liboggz
992 - iceweasel <not-affected> (uses xulrunner)
993 - xulrunner <unfixed> (embed; bug #540959)
994 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
995 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
996 - iceape <unfixed> (embed)
997 [etch] - iceape <not-affected> (introduced in 2.0)
998 [lenny] - iceape <not-affected> (introduced in 2.0)
999
1000 liboggplay
1001 - iceweasel <not-affected> (uses xulrunner)
1002 - xulrunner <unfixed> (embed; bug #540959)
1003 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1004 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1005 - iceape <unfixed> (embed)
1006 [etch] - iceape <not-affected> (introduced in 2.0)
1007 [lenny] - iceape <not-affected> (introduced in 2.0)
1008
1009 php-net-dnsbl
1010 - serendipity <unfixed> (embed)
1011
1012 php-onyx-rss
1013 - serendipity <unfixed> (embed)
1014
1015 php-text-wiki
1016 - serendipity <unfixed> (embed)
1017
1018 php-xml-rpc
1019 - serendipity <unfixed> (embed)
1020
1021 polarssl (does not have a shared library)
1022 - pdkim <itp> (embed; bug #543150)
1023 - xyssl <unfixed> (old-version)
1024
1025 pidgin
1026 - gaim <removed> (old-version)
1027 - qutecom <unfixed> (embed; bug #559785)
1028
1029 icu
1030 - webkit 1.0.1-1 (embed; bug #547214)
1031 - texlive-bin <unfixed> (fork)
1032 NOTE: texlive upstream working with icu upstream to merge their changes
1033
1034 cyrus-imapd-2.2
1035 - kolab-cyrus-imapd <unfixed> (fork)
1036 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1037
1038 python-cxx-dev
1039 - freecad <unfixed> (embed; bug #547936)
1040
1041 libzipios++-dev
1042 - freecad <unfixed> (embed; bug #547941)
1043
1044 linux-2.6
1045 - kvm <unfixed> (embed; bug #549973) [./kernel/*]
1046 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1047 - kernel-source-2.6.8 <removed> (old-version)
1048 - kernel-source-2.4.27 <removed> (old-version)
1049 - kernel-source-2.4.24 <removed> (old-version)
1050 - kernel-source-2.2.25 <removed> (old-version)
1051 - kernel-source-2.2.20 <removed> (old-version)
1052
1053 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1054 - kvm <unfixed> (embed) [./libfdt/*]
1055
1056 qweb (not packaged)
1057 - ajaxterm <unfixed>
1058
1059 opensaml2
1060 - opensaml <removed> (old-version)
1061
1062 shibboleth-sp2
1063 - shibboleth-sp <removed> (old-version)
1064
1065 tuxonice-userui
1066 - suspend2-userui <removed> (old-version)
1067
1068 expat
1069 - w3c-libwww <removed> (embed; bug #551941)
1070 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1071 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1072 - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1073 - python2.4 <unfixed> (embed; bug #553403)
1074 - wxwindows2.4 <removed> (embed)
1075 - wxwidgets2.6 <unfixed> (embed)
1076 - wxwidgets2.8 <unfixed> (embed)
1077 - celementtree <unfixed> (embed)
1078 - audacity 1.3.2-1 (embed)
1079 - matanza <unfixed> (embed)
1080 - tdom <unfixed> (embed)
1081 - udunits <unfixed> (embed)
1082 - apr-util 1.2 (embed)
1083 - ayttm <unfixed> (embed)
1084 - cableswig <unfixed> (embed)
1085 - cadaver <unfixed> (embed)
1086 - cmake <unfixed> (embed)
1087 - coin3 <unfixed> (embed)
1088 - gdcm <unfixed> (embed)
1089 - ghostscript <unfixed> (embed)
1090 - grmonitor <unfixed> (embed)
1091 - iceape <unfixed> (embed)
1092 - insighttoolkit <unfixed> (embed)
1093 - libparagui1.1 <unfixed> (embed)
1094 - paraview <unfixed> (embed)
1095 - poco <unfixed> (embed)
1096 - simgear <unfixed> (embed)
1097 - sitecopy <unfixed> (embed)
1098 - smart 1.0-1 (embed)
1099 [etch] - smart <unfixed> (embed)
1100 - swish-e <unfixed> (embed)
1101 - tla <unfixed> (embed)
1102 - vtk <unfixed> (embed)
1103 - wbxml2 <unfixed> (embed)
1104 - xmlrpc-c <unfixed> (embed)
1105 - iceweasel <unfixed> (embed)
1106 - kompozer <unfixed> (embed)
1107 - vxl <unfixed> (embed)
1108 - xulrunner <unfixed> (embed)
1109 - apache2 2.2 (embed)
1110 - texlive-bin <unfixed> (embed) [included twice]
1111 - vnc4 <unfixed> (embed)
1112 - xotcl <unfixed> (embed)
1113
1114 xerces-c
1115 - xerces-c2 <unfixed> (old-version)
1116 - xerces27 <removed> (old-version)
1117
1118 md5 (RSA's version; not the gnu version provided by coreutils)
1119 - w3c-libwww <removed> (embed; bug #551942)
1120 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1121
1122 enet
1123 - sauerbraten <unfixed> (embed; #497194)
1124
1125 eglibc
1126 - glibc <removed> (old-version)
1127
1128 galib
1129 - gamera 3.2.3-1 (embed)
1130
1131 configobj
1132 - bzr <unfixed> (embed; bug #555336)
1133 - elisa <unfixed> (embed; bug #555337)
1134 - gaupol <unfixed> (embed; bug #555338)
1135 - ipython <unfixed> (embed; bug #555339)
1136 - pida <unfixed> (embed; bug #555340)
1137 - psychopy <unfixed> (embed; bug #555341)
1138 - rest2web <unfixed> (embed; bug #555342)
1139 - auth2db <unknown> (embed)
1140 - dynagen <unknown> (embed)
1141 - iceweasel <unknown> (embed)
1142 - sabnzbdplus <unknown> (embed)
1143 - xulrunner <unknown> (embed)
1144 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1145
1146 python-clientform
1147 - bibus <unfixed> (embed; bug #555332)
1148 - zope2.10 <unfixed> (embed; bug #555333)
1149 - zope2.11 <unfixed> (embed; bug #555334)
1150 - python-mechanize <unknown> (embed)
1151 - twill <unknown> (embed)
1152
1153 python-mechanize
1154 - zope2.10 <unfixed> (embed; bug #555337)
1155 - zope2.11 <unfixed> (embed; bug #555338)
1156 - twill <unknown> (embed; bug #555339)
1157
1158 pexpect
1159 - duplicity 0.6.06-1 (embed; bug #555361)
1160 - hplip <unfixed> (embed; bug #555362)
1161 - smart <unfixed> (embed; bug #555363)
1162
1163 pyparsing
1164 - bauble <unfixed> (embed; bug #555366)
1165 - boa-constructor 0.6.1-8 (embed; bug #555367)
1166 - calibre <unfixed> (embed; bug #555368)
1167 - matplotlib <unfixed> (embed; bug #531024)
1168 - zhpy <unfixed> (embed; bug #555370)
1169 - polybori <unknown> (embed)
1170 - python-whoosh <unknown> (embed)
1171 - twill <unknown> (embed)
1172 - zope-textindexng3 <unknown> (embed)
1173
1174 python-pysqlite2
1175 - python2.4 <unfixed> (embed; bug #553403)
1176 - python2.5 <unfixed> (embed; bug #553403)
1177
1178 celementtree
1179 - python2.5 <unfixed> (embed)
1180 - smart 1.0-1 (embed)
1181 [etch] - smart <unfixed> (embed)
1182
1183 elementtree
1184 - python2.5 <unfixed> (embed)
1185 - bzr <unfixed> (embed; bug #555343)
1186 - gedit 2.28.2-1 (embed; bug #555344)
1187 - smart 1.0-1 (embed)
1188 [etch] - smart <unfixed> (embed)
1189 - solfege <unfixed> (embed; bug #555345)
1190 - w3af <unfixed> (embed; bug #555346)
1191 - python-qt4 <unknown> (embed)
1192 - sphinx <unknown> (embed)
1193 - python-nltk <itp> (embed)
1194
1195 python2.5
1196 - python2.4 <unfixed> (old-version)
1197 - jython <unfixed> (embed)
1198 NOTE: embeds many stdlib modules
1199 - python-django <unfixed> (embed; bug #555419)
1200 NOTE: embeds stdlib modules: doctest, decimal
1201 - gamera 3.2.3-1 (embed)
1202 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1203 - boa-constructor <unfixed> (embed; bug #555426)
1204 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1205 - nicotine <unfixed> (embed; bug #555427)
1206 NOTE: embeds stdlib modules: ConfigParser
1207 - museek+ <unfixed> (embed; bug #555428)
1208 NOTE: embeds stdlib modules: ConfigParser
1209 - vegastrike-data <unfixed> (embed)
1210 NOTE: embeds many stdlib modules
1211 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1212 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1213 - config-manager <unfixed> (embed; bug #555423)
1214 NOTE: embeds stdlib modules: optparse
1215 - jhbuild 2.28.0-1 (embed; bug #555421)
1216 NOTE: embeds stdlib modules: optparse, subprocess
1217 - smart <unfixed> (embed; bug #555432)
1218 NOTE: embeds stdlib modules: optparse
1219 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1220 NOTE: embeds stdlib modules: doctest
1221 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1222 NOTE: embeds stdlib modules: doctest
1223 - distribute <unfixed> (embed)
1224 NOTE: embeds stdlib modules: doctest
1225 - python-setuptools <unfixed> (embed; bug #555435)
1226 NOTE: embeds stdlib modules: doctest
1227 - zope.testing <unfixed> (embed; bug #555436)
1228 NOTE: embeds stdlib modules: doctest
1229 - translate-toolkit <unfixed> (embed; bug #555422)
1230 NOTE: embeds stdlib modules: textwrap, contextlib
1231 - libtpclient-py <unfixed> (embed; bug #555424)
1232 NOTE: embeds stdlib modules: subprocess
1233 - grass <unfixed> (embed; bug #555425)
1234 NOTE: embeds stdlib modules: subprocess
1235 - coherence <unfixed> (embed; bug #555429)
1236 NOTE: embeds stdlib modules: uuid
1237 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1238 NOTE: embeds stdlib modules: uuid
1239 - setroubleshoot <unfixed> (embed; bug #555431)
1240 NOTE: embeds stdlib modules: uuid
1241 - linkchecker <unfixed> (embed; bug #555414)
1242 NOTE: embeds msgfmt.py script
1243 - imdbpy <unfixed> (embed)
1244 NOTE: embeds msgfmt.py script
1245 - kiwi <unfixed> (embed)
1246 NOTE: embeds msgfmt.py script
1247 - moin <unfixed> (embed)
1248 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1249 - plone3 <unfixed> (embed)
1250 NOTE: embeds msgfmt.py script
1251 - roundup <unfixed> (embed)
1252 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1253 - rednotebook <unfixed> (embed; bug #555415)
1254 NOTE: embeds msgfmt.py script
1255 - turbogears <unfixed> (embed)
1256 NOTE: embeds msgfmt.py script
1257 - elisa <unfixed> (embed)
1258 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1259 - calibre <unfixed> (embed)
1260 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1261 - mailman <unfixed> (embed; #555416)
1262 NOTE: embeds msgfmt.py script
1263 - python-docutils <unknown> (embed)
1264 NOTE: embeds stdlib modules: optparse, textwrap
1265 - python-imaging <unknown> (embed)
1266 NOTE: embeds stdlib modules: doctest
1267 - python-mechanize <unknown> (embed)
1268 NOTE: embeds stdlib modules: doctest
1269 - twill <unknown> (embed)
1270 NOTE: embeds stdlib modules: subprocess
1271 - zeroc-ice <unknown> (embed)
1272 NOTE: embeds stdlib modules: subprocess
1273 - wxwidgets2.8 <unknown> (embed)
1274 NOTE: embeds stdlib modules: subprocess
1275 - cycle <unknown> (embed)
1276 NOTE: embeds msgfmt.py script
1277 - deluge <unknown> (embed)
1278 NOTE: embeds msgfmt.py script
1279 - opendict <unknown> (embed)
1280 NOTE: embeds msgfmt.py script
1281 - openerp-client <unknown> (embed)
1282 NOTE: embeds msgfmt.py script
1283 - rapidsvn <unknown> (embed)
1284 NOTE: embeds msgfmt.py script
1285 - wammu <unknown> (embed)
1286 NOTE: embeds msgfmt.py script
1287 - gaphor <unknown> (embed)
1288 NOTE: embeds msgfmt.py script
1289 - pida <unknown> (embed)
1290 NOTE: embeds msgfmt.py script
1291 - python-formencode <unknown> (embed)
1292 NOTE: embeds msgfmt.py script
1293 - duplicity <unfixed> (embed)
1294 NOTE: embeds stdlib module: urlparse, tarfile
1295 - pygopherd <unfixed> (embed)
1296 NOTE: embeds stdlib module: zipfile
1297
1298 argparse
1299 - twill <unfixed> (embed; bug #555347)
1300 - ipython <unfixed> (embed; bug #555348)
1301
1302 coherence
1303 - elisa <unfixed> (embed; bug #555335)
1304
1305 simpletal
1306 - plastex <unfixed> (embed; bug #555371)
1307
1308 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1309 - postr <unfixed> (embed)
1310 - elisa <unfixed> (embed)
1311
1312 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1313 - apertium-tolk <unfixed> (embed)
1314 - ipython <unfixed> (embed)
1315 - virtaal <unfixed> (embed)
1316
1317 distribute
1318 - setuptools <removed> (old-version)
1319
1320 rails
1321 - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1322 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1323 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1324 - thin <unfixed> (embed) [./spec/rails_app/*]
1325 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1326 NOTE: be dangerous if developers are naively basing their code off of the examples
1327 NOTE: prototype.js is among the example files
1328
1329 lucene2 (prototype.js is among the embeds in the following)
1330 - lucene <unfixed> (old-version)
1331 - pylucene <unfixed> (embed)
1332 - libpdfbox-java <unfixed> (embed)
1333 - libfontbox-java <unfixed> (embed)
1334 - libjempbox-java <unfixed> (embed)
1335 - solr <unfixed> (embed)
1336
1337 unicode-data
1338 - syslinux <unfixed> (embed)
1339 - camomile <unfixed> (embed)
1340 - fribidi <unfixed> (embed)
1341 - m17n-db <unfixed> (embed)
1342 - sbcl <unfixed> (embed)
1343 - heimdal <unfixed> (embed)
1344 - icu <unfixed> (embed)
1345 - icu4j <unfixed> (embed)
1346 - krb5 <unfixed> (embed)
1347 - moodle <unfixed> (embed)
1348 - openldap <unfixed> (embed)
1349 - pike7.6 <unfixed> (embed)
1350 - samba <unfixed> (embed)
1351 - samba4 <unfixed> (embed)
1352 - cmucl <unfixed> (embed)
1353 - typo3-src <unfixed> (embed)
1354 - mauve <unfixed> (embed)
1355 - texlive-bin <unfixed> (embed)
1356 - ypsilon <unfixed> (embed)
1357 - jeuclid <unfixed> (embed)
1358 - charmap.app <unfixed> (embed)
1359 - clisp <unfixed> (embed)
1360 - gnulib <unfixed> (embed)
1361 - opensrs-client <unfixed> (embed)
1362 - saxonb <unfixed> (embed)
1363 - rails <unfixed> (embed)
1364
1365 feedparser
1366 - rawdog <unfixed> (embed; bug #383422)
1367 - miro <unfixed> (embed; bug #555351)
1368 - calibre <unfixed> (embed; bug #555352)
1369 - freevo <unfixed> (embed; bug #555353)
1370 - pida <unfixed> (embed; bug #555354)
1371 - planet-venus <unfixed> (embed; bug #555355)
1372 - plone3 <unfixed> (embed; bug #555356)
1373 - exaile 0.2.14+debian-1 (embed)
1374 - screenlets 0.1.2-3 (embed)
1375 NOTE: included twice
1376
1377 agg:
1378 - matplotlib <unfixed> (embed: bug #377271)
1379 - contextfree <unfixed> (embed)
1380 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1381 - exactimage <unfixed> (embed)
1382 - python-enable <unfixed> (embed)
1383 - mapnik 0.5.1-3 (embed)
1384 NOTE: links statically to agg, but shared library is not available (bug #377271)
1385
1386 vtk
1387 - paraview <unfixable> (embed; bug #495426)
1388
1389 txt2tags
1390 - rednotebook <unfixed> (embed)
1391
1392 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1393 - gajim <unfixed> (embed)
1394 - emesene <unfixed> (embed)
1395 - convirt <unfixed> (embed)
1396 - pida <unfixed> (embed)
1397 - rednotebook <unfixed> (embed)
1398
1399 horde3 (prototype.js is among the embeds in the following)
1400 - mnemo2 <unfixed> (embed)
1401 - nag2 <unfixed> (embed)
1402
1403 cimg
1404 - gmic <itp> (embed)
1405
1406 mootools
1407 - gmic <itp> (embed)
1408
1409 openldap
1410 - openldap2.3 <removed> (old-version)
1411
1412 grub2
1413 - grub <unfixed> (old-version)
1414
1415 gnupginterface
1416 - duplicity <unfixed> (embed)
1417
1418 python-dateutil
1419 - awn-extras-applets <unfixed> (embed)
1420 - matplotlib <unknown> (embed)
1421
1422 cups
1423 - cupsys <removed> (old-version)
1424
1425 yui
1426 - bcfg2 <not-affected> (present in source but not included in any binary files)
1427 - serendipity <unfixed> (embed; bug #557746)
1428 - moodle 1.8.2.dfsg-5 (embed)
1429 - jifty <unfixed> (embed; bug #557748)
1430 - webgui 7.7.26-1 (embed)
1431 - loggerhead 1.17-1 (embed)
1432
1433 quake3 (vanilla source not packaged in debian)
1434 - openarena <unfixable> (fork)
1435
1436 quake2 (vanilla source not packaged in debian)
1437 - alien-arena <unfixable> (fork)
1438 - warsow <unfixable> (fork)
1439
1440 libtheora
1441 - iceweasel <not-affected> (uses xulrunner)
1442 - xulrunner <unfixed> (embed; bug #540959)
1443 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1444 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1445 - iceape <unfixed> (embed; bug #559276)
1446 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1447 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1448
1449 dtoa
1450 - bfilter <unfixed> (embed)
1451 - cacao <unfixed> (embed)
1452 - cdrdao <unfixed> (embed)
1453 - classpath <unfixed> (embed)
1454 - freej <unfixed> (embed)
1455 - iceape <unfixed> (embed)
1456 - iceweasel <unfixed> (embed)
1457 - jscoverage <unfixed> (embed)
1458 - kde4libs <unfixed> (embed)
1459 - kdelibs <unfixed> (embed)
1460 - kompozer <unfixed> (embed)
1461 - libv8 <unfixed> (embed)
1462 - mono <unfixed> (embed)
1463 - newlib <unfixed> (embed)
1464 - nspr <unfixed> (embed)
1465 - php5 <unfixed> (embed)
1466 - polyml <unfixed> (embed)
1467 - qt4-x11 <unfixed> (embed)
1468 - rhino <unfixed> (embed)
1469 NOTE: code translated to Java
1470 - ruby1.8 <unfixed> (embed)
1471 - ruby1.9 <unfixed> (embed)
1472 - ruby1.9.1 <unfixed> (embed)
1473 - sdd <unfixed> (embed)
1474 - sfind <unfixed> (embed)
1475 - star <unfixed> (embed)
1476 - tinymux <unfixed> (embed)
1477 - virtualbox-ose <unfixed> (embed)
1478 - webkit <unfixed> (embed)
1479 - xulrunner <unfixed> (embed)
1480
1481 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1482 - firegpg <unfixed> (embed)
1483 - enigmail <unfixed> (embed)
1484
1485 ptmalloc (not packaged in Debian)
1486 - crystalspace <unfixed> (embed)
1487 - qt4-x11 <unfixed> (embed)
1488
1489 svgalib
1490 - usplash <unfixed> (embed)
1491
1492 bogl
1493 - usplash <unfixed> (embed)
1494
1495 taglist
1496 - usplash <unfixed> (embed)
1497
1498 portaudio
1499 - audacity <unfixed> (embed; bug #323711)
1500
1501 nyquist
1502 - audacity <unfixed> (embed)
1503 NOTE: embeds a forked nyquist with support for a shared library
1504
1505 vamp-plugin-sdk
1506 - audacity <unfixed> (embed)
1507
1508 wordpress
1509 - libwordpress-xmlrpc-perl <unfixed> (embed) [./xmlrpc.php]
1510
1511 php5
1512 - php4 <removed> (old-version)
1513
1514 classpath
1515 - libgnucrypto-java <unfixed> (embed; bug #559788)
1516
1517 libtool
1518 - arts <unfixed> (embed)
1519 - bochs <unfixed> (embed)
1520 - camserv <unfixed> (embed)
1521 - collectd <unfixed> (embed)
1522 - courier-authlib <unfixed> (embed)
1523 - cvsnt <unfixed> (embed)
1524 - dico <unfixed> (embed)
1525 - freeradius <unfixed> (embed)
1526 - ggobi <unfixed> (embed)
1527 - glame <unfixed> (embed)
1528 - gnash <unfixed> (embed)
1529 - gnu-smalltalk <unfixed> (embed)
1530 - google-gadgets <unfixed> (embed)
1531 - graphicsmagick <unfixed> (embed)
1532 - graphviz <unfixed> (embed)
1533 - guile-1.6 <unfixed> (embed)
1534 - hamlib <unfixed> (embed)
1535 - hercules <unfixed> (embed)
1536 - jags <unfixed> (embed)
1537 - kdelibs <unfixed> (embed)
1538 - libannodex <unfixed> (embed)
1539 - libextractor <unfixed> (embed)
1540 - libmcrypt <unfixed> (embed)
1541 - libtunepimp <unfixed> (embed)
1542 - mp4h <unfixed> (embed)
1543 - naim <unfixed> (embed)
1544 - parser-mysql <unfixed> (embed)
1545 - pinball <unfixed> (embed)
1546 - redland <unfixed> (embed)
1547 - siproxd <unfixed> (embed)
1548 - ski <unfixed> (embed)
1549 - synfig <unfixed> (embed)
1550 - unixodbc <unfixed> (embed)
1551 - xmlsec1 <unfixed> (embed)
1552 - clamav <unfixed> (embed)
1553 - imagemagick <unfixed> (embed)
1554 - hypre <unfixed> (embed)
1555 - lam <unfixed> (embed)
1556 - openmpi <unfixed> (embed)
1557 - parser <unfixed> (embed)
1558 - pdsh <unfixed> (embed)
1559 - sbnc <unfixed> (embed)
1560 - sdcc <unfixed> (embed)
1561 - wml <unfixed> (embed)
1562 - proftpd-dfsg <unfixed> (embed)
1563 - babel <unfixed> (embed)
1564 - libprelude <unfixed> (embed)
1565 - heartbeat <unknown> (embed)
1566 - gcc-* <unknown> (embed)
1567
1568 ocamlgsl
1569 - orpie 1.5.1-7.1 (embed; bug #550058)

  ViewVC Help
Powered by ViewVC 1.1.5