/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Contents of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log


Revision 14846 - (show annotations) (download)
Thu Jun 10 12:07:02 2010 UTC (2 years, 11 months ago) by nion
File size: 53762 byte(s)
Error occurred while calculating annotation data.
lxr-cvs embedds lxr
1 Embedded code copies
2 ====================
3
4 This file collects source packages that embed code from other projects.
5 This is considered bad for fixing security flaws because the fix needs
6 to be applied in multiple source packages.
7
8 Format:
9 <srcpkg> (<optional comment about srcpkg>)
10 - <embedding srcpkg> <status> (<sort>; bug #<number>)
11 NOTE: optional comments about the linkage of the embedding srcpkg
12
13 status: version number fixing the embedded copy
14 <unfixed> if the issue is not yet fixed
15 <removed> if the package was removed from the archive
16 <itp> if the package is in the process of being packaged
17 <not-affected> if the package does not use the embedded copy
18 <unknown> if the version number can not be determined
19 <unfixable> for unavoidable cases (e.g., forks that add real value)
20 sort: static (linking statically against a lib)
21 embed (embeds a copy of the library into another source package)
22 modified-embed (embeds a code copy that differs from upstream code)
23 fork (a full-blown fork of another source package)
24 old-version (an older version of essentially the same code)
25
26 The srcpkg might be some string to identify the code if there is no
27 specific source package.
28
29 Everything up to the next line is ignored.
30 ---BEGIN
31 xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
32 NOTE: Fixed packages link to poppler library unless otherwise noted
33 - pdftohtml <unknown>
34 [sarge] - pdftohtml <unfixed>
35 [etch] - pdftohtml <unfixed>
36 NOTE: has been replaced by poppler-utils
37 - kdegraphics 4:4.2.2-1 (embed; bug #436164)
38 - texlive-base 3.0-12 (embed)
39 - texlive-bin 2007-1 (embed)
40 - koffice 1:2.0.0-1 (embed; bug #436163)
41 - libextractor 0.5.12-1 (embed)
42 NOTE: libextractor is using its own pdf decoder now
43 - ipe <unfixed> (embed)
44 NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
45 - ruby-gnome2 <unknown> (embed)
46 - pdfedit <unfixed> (embed; bug #510794)
47 - swftools <removed> (embed; bug #551293)
48 - poppler <unfixable> (fork)
49
50 ppmd
51 - libcomplearn-mod-ppmd <unfixed> (fork)
52 NOTE: discussion in #458152
53
54 libevent
55 - transmission 1.71-1 (embed; bug #529372)
56
57 lrmi
58 - read-edid 2.0.0-1 (embed; bug #495131)
59 - s3switch <unfixed> (embed)
60 - xresprobe <unfixed> (embed)
61 - zhcon <unfixed> (embed)
62
63 peercast
64 - gnome-peercast <removed> (embed)
65 [etch] - gnome-peercast <unfixed> (embed)
66
67 silc-toolkit
68 - silc-client 1.1~beta6-1 (embed)
69
70 icclib
71 - ghostscript <unfixed> (embed)
72 - argyll <unfixed> (embed)
73
74 libusb
75 - argyll <unfixed> (embed)
76
77 dietlibc
78 - ccontrol 0.9.1+20071204-1 (static)
79
80 libmikmod
81 - sdl-mixer1.2 <unfixed> (embed)
82 TODO: report bug
83
84 libiax
85 - iaxmodem <unfixable> (embed; bug #548885)
86
87 spandsp
88 - iaxmodem <unfixable> (embed; bug #548885)
89
90 python-paramiko
91 - fabric 0.9.0-2 (embed; bug #561398)
92
93 zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
94 - dpkg 1.15.6 (static)
95 NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
96 - rsync <unfixed> (embed)
97 - cherokee <unfixed> (embed)
98 NOTE: somehow derived code base
99 - mono <unfixed> (embed)
100 TODO: check mozilla
101 - Linux kernels <unfixed> (embed)
102 - pvpgn 1.7.8-2 (embed)
103 - mrtg 2.12.2-1 (embed)
104 - rpm <unknown> (embed)
105 NOTE: pinged anibal since when rpm was fixed
106 - tuxcmd-modules <unfixed> (embed)
107 - zsync <unfixed>
108 - tra <unfixed>
109 - sash <unfixed>
110 - nsis <unfixed>
111 - pyfits 1:2.3.1-1
112 - mseide-msegui <unfixed>
113 NOTE: mseide
114 - mirrordir <unfixed>
115 - poco <unfixed>
116 - klibc <unfixed>
117 - emboss <unfixed>
118 - ghostscript <unfixed>
119 - freeimage <unfixed>
120 - clamav <unfixed> (fork)
121 NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
122 - tuxonice-userui <unfixed> (static)
123 - plt-scheme <unfixed>
124 - perl <unfixed>
125 - paraview <unfixed>
126 - velvet 0.7.56~nozlibcopy-1
127 - gcvs <unfixed>
128 - dump <unfixed>
129 - aide <unfixed> (static)
130 - dar <unfixed> (static)
131 - avfs <unfixed>
132 - fpc <unfixed>
133 - winff <unfixed>
134 NOTE: inherited from fpc, see #472304
135 - lazarus <unfixed>
136 NOTE: inherited from fpc, see #472304
137 - erlang <unfixed> (embed)
138 - gamera 3.2.3-1 (embed)
139 - python2.4 <unfixed> (embed; bug #553403)
140 - python2.5 <unfixed> (embed; bug #553403)
141 - texlive-bin <unknown> (embed)
142
143 dulwich
144 - hg-git 0.1.0-1 (embed; bug #541996)
145
146 libvigraimpex
147 - hugin <unfixed> (embed; bug #542259)
148 - enblend-enfuse <unfixed> (embed; bug #542258)
149 - gamera 3.2.3-1 (embed)
150
151 libbz2
152 - dpkg 1.15.6 (static)
153 - amd64-libs <unfixed> (static)
154 NOTE: let's call it "static"
155 - dar <unfixed> (static)
156 - dump <unfixed> (static)
157 - unalz <unfixed> (embed)
158 NOTE: has code, by the maint, to use the system version but links against the internal copy
159
160 libyahoo2
161 - centerim <unfixed> (embed; bug #559783)
162
163 libmsn
164 - centerim <unfixed> (embed; bug #559783)
165
166 libgadu
167 - centerim <unfixed> (embed; bug #559783)
168 - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
169 - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
170 - kdenetwork 4:3.3.2-5 (embed)
171 NOTE: from kdenetwork: kopete
172 - ekg 1:1.8~rc0-1 (embed)
173 - kadu 0.6.0.2-3 (embed; bug #504430)
174 - gadu <itp> (embed)
175
176 xmlrpc (which package is the "origin" of this code?)
177 - drupal <unfixed> (embed)
178 - phpgroupware <unfixed> (embed)
179 - egroupware <unfixed> (embed)
180 - phpwiki <unfixed> (embed)
181 - php4 <removed> (embed)
182 TODO: check, php-pear, IIRC this was reorganized some weeks ago?
183
184 shtool (affects build-time only)
185 - mysql-ocaml <unfixed> (embed)
186 - php4 <removed> (embed)
187 - php5 <unfixed> (embed)
188
189 xulrunner
190 - iceape <unfixed> (embed; bug #561749)
191 - iceweasel 2.0.0.19 (embed)
192 - icedove <unfixed> (embed; bug #561750)
193 - kompozer <unfixed> (embed; bug #532168)
194 - galeon 2.0.2-4 (embed)
195 - epiphany-browser 2.14.3-8 (embed)
196 - conkeror 0.9~git080629-2 (embed)
197 - kazehakase 0.4.2-1 (embed)
198
199 xli
200 - xloadimage <unfixed> (embed)
201
202 lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
203 - openmotif <unfixed> (embed)
204
205 libxpm
206 - lesstif <unfixed> (embed; bug #575750)
207
208 kerberized apps with BSD origin
209 - krb4 <removed> (embed)
210 - krb5 <unfixed> (embed)
211 - heimdal <unfixed> (embed)
212
213 grip (which pkg is the origin?)
214 - libcdaudio <unfixed>
215 - grip <unfixed>
216 - gnome-vfs <unfixed>
217 TODO: check vfs2 as well
218
219 fudforum
220 [etch] - phpgroupware <unfixed> (embed)
221 NOTE: phpgroupware-fudforum
222 [sarge] - egroupware-fudforum <removed> (embed)
223
224 libbsd
225 - rdate 1:1.2-3 (embed)
226 - atheme-services <unfixed>
227 - libbsd-arc4random-perl <unfixed>
228 - isakmpd <unfixed>
229 - bsdgames <unfixed> (embed)
230 - bsd-mailx <unfixed> (embed)
231 - netcat-openbsd <unfixed> (embed; bug #550611)
232 - openssh <unfixed> (embed)
233 - unworkable <unfixed> (embed)
234
235 cvs
236 - gcvs <unfixed> (embed)
237 NOTE: see cvsunix/src in tarball
238
239 pcre3
240 - php4 <removed> (embed)
241 - analog 2:5.23-0woody1 (embed)
242 - goffice <unfixed> (embed)
243 NOTE: libgoffice-*
244 - vfu 4.06-4.1 (embed; bug #450754)
245 - tf5 5.0beta7-1 (embed)
246 - monotone 0.43-1 (embed)
247 NOTE: this only affects versions >= 0.37
248 - glib2.0 2.15.2-1 (embed)
249 - apache2 2.0.53-4 (embed)
250 - exim4 4.10-0.srh20.12 (embed)
251 - yacas <unfixed> (embed)
252 NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
253 - gtamsanalyzer.app 0.42-5 (embed)
254 - tin 980117-1 (embed)
255 - kazehakase 0.5.2-1
256 - webkit 1.0.1-1 (embed)
257 - qt4-x11 <unfixed> (embed)
258 NOTE: embedded via webkit copy
259 - erlang <unfixed> (embed)
260 - ssed <unfixed> (embed)
261 - ircd-hybrid <unfixed> (static)
262 - emboss <unfixd>
263 - cherokee <unfixed> (embed)
264 - oftc-hybrid <unfixed> (embed)
265 - ratbox-services <unfixed> (embed)
266 - squeak-vm <unfixed> (embed)
267 - tinymux <unfixed> (embed)
268
269 tiff
270 - wxwindows2.4 2.2.1 (embed)
271 - gamera 3.2.3-1 (embed)
272 - freeimage <unfixed> (embed)
273 - libtk-img <unfixed> (embed)
274 NOTE: there are two copies, one under tiff/ other under libtiff/
275 - gdal <unfixed>
276
277 uudeview
278 - libconvert-uulib-perl <unfixed> (embed)
279 - pan <unfixed> (embed)
280
281 sqlite (not affected by security vulnerabilities so far)
282 - amarok <unfixed> (embed)
283 - monotone 0.43-1 (embed)
284 - iceweasel <unfixed> (embed)
285 - heimdal <unfixed> (embed; bug #559616)
286
287 util-linux/mount
288 - loop-aes-utils <unfixed> (embed)
289 NOTE: contains code from util-linux' mount in the mount-aes-udeb
290
291 sylpheed
292 - sylpheed-claws <unfixed> (fork)
293
294 phpsysinfo
295 - egroupware <unfixed> (embed)
296 - phpgroupware <unfixed> (embed)
297
298 phpldapadmin
299 [sarge] - egroupware <unfixed> (embed)
300 NOTE: removed from egroupware after sarge
301
302 chmlib
303 - kchmviewer <unknown> (embed)
304
305 ffmpeg (libavcodec/libavformat)
306 - mplayer 1.0~rc2-14 (embed; bug #395252)
307 - kino 1.0.0-1
308 - vlc <not-affected> (Links dynamically since initial release)
309 - smilutils 0.3.0-10
310 NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
311 - motion 3.1.19-1
312 - gstreamer0.10-ffmpeg 0.10.3-2
313 - xmovie <removed> (static)
314 TODO: gimp-gap (potentially using ffmpeg code as well)
315 - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
316 - audacity 1.3.7-2 (embed; bug #512278)
317
318 faad2
319 - mplayer 1.0~rc2-20 (embed)
320 - avifile <unfixed> (embed; bug #538750)
321 - ffmpeg-debian <removed> (embed)
322
323 libmad (MPEG decoding lib)
324 - xine-lib <unfixed> (embed)
325 - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
326 TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
327
328 libdts
329 - xine-lib <unfixed> (embed)
330
331 flac
332 - xine-lib <unfixed> (embed)
333
334 liba52
335 - a52dec <unfixed> (embed)
336 - xine-lib <unfixed> (embed)
337
338 mpeg2dec (libmpeg2)
339 - xine-lib <unfixed> (embed)
340
341 libmpeg3
342 - squeak-vm <unfixed> (embed)
343
344 libntlm
345 - wget <unfixed> (fork; bug #550436)
346 - curl <unfixed> (fork; bug #550437)
347 - cntlm <unfixed> (fork; bug #550438)
348
349 uw-imap
350 - pine <unfixed> (embed)
351 - alpine <unfixed> (embed)
352
353 imagemagick
354 - graphicsmagick <unfixed> (fork)
355
356 python-urlgrabber
357 - mercurial <unfixed> (embed; bug #531062)
358 - w3af <unfixed> (embed; bug #555372)
359 [experimental] - harvestman <unfixed> (embed; bug #555373)
360
361 beautifulsoup
362 - python-mechanize <unfixed> (embed; bug #555349)
363 - zope2.11 <removed> (embed; bug #555350)
364 - twill <unknown> (embed)
365
366 halibut
367 - nsis <unfixed> (fork)
368
369 libghttp
370 - hotway <unfixed> (embed)
371
372 libsndfile
373 - ardour 1:2.7.1-1 (embed)
374
375 glibmm2.4
376 - ardour 1:2.7.1-1 (embed)
377
378 libgnomecanvasmm2.6
379 - ardour 1:2.7.1-1 (embed)
380
381 libsigc++-2.0
382 - ardour 1:2.7.1-1 (embed)
383
384 soundtouch
385 - ardour 1:2.7.1-1 (embed)
386
387 libmms
388 - xine-lib <unfixed> (embed)
389 - mimms <unfixed> (embed)
390
391 fckeditor
392 - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
393 - moin 1.8.2-2 (embed; bug #452599)
394 - karrigell <removed> (embed; bug #452598)
395 - gforge 4.6.99+svn6225-1 (embed)
396 - request-tracker3.8 <unfixed> (embed)
397 - otrs2 <unfixed> (embed)
398
399 ipatlas (not packaged in Debian)
400 - moodle <unfixed> (embed; bug #507185)
401
402 libphp-phpmailer
403 - moodle <unfixed> (embed; bug #507185)
404 - mahara <unfixed> (embed)
405 - symfony <unfixed> (embed; bug #566778)
406 [etch] - phpgroupware <unfixed> (embed)
407 NOTE: phpgroupware-felamimail is only in etch
408 - egroupware <unfixed> (embed; bug #504283)
409 - glpi <unfixed>
410
411 htmlArea (not packaged in Debian)
412 - moodle <unfixed> (embed)
413
414 giflib
415 - wine <unfixed> (embed; bug #466181)
416
417 bennu (not packaged in Debian, http://bennu.sourceforge.net)
418 - moodle <unfixed> (embed)
419
420 smarty
421 - moodle 1.8.2-2 (embed; bug #471158)
422 - gallery2 2.2.5-2 (embed; bug #471160)
423 - mahara 0.9.2-2 (embed; bug #471201)
424 - gosa 2.4beta1-1 (embed; bug #471200)
425
426 TinyMCE
427 - wordpress 2.5.1-3 (embed; bug #478257)
428 - moodle <unfixed> (embed; bug #507185)
429 - knowledgeroot <unfixed> (embed)
430 - joomla <itp> (bug #326398)
431
432 scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
433 - scite <unfixed> (embed)
434 - qscintilla <unfixed> (embed)
435 - qscintilla2 <unfixed> (embed)
436 - geany <unfixed> (fork)
437 - anjuta <unfixed> (embed)
438
439 libphp-adodb
440 - moodle <unfixed> (embed; bug #507185)
441 NOTE: also AdoDB-XML Schema
442 - gallery2 <unfixed> (embed)
443 - phppgadmin <unfixed> (embed)
444 - egroupware <unfixed> (embed)
445 - phpwiki <unfixed> (embed)
446 - torrentflux 2.0beta1-2 (embed)
447 - ipplan <unfixed> (embed)
448 - typo3-src <unfixed> (embed)
449 - cacti <unknown> (embed)
450 [sarge] - cacti <unfixed> (embed)
451 NOTE: dependency exists, but internal version is used
452 - gforge 4.7~rc2-6 (embed)
453 - mahara <unfixed> (embed)
454
455 gzip
456 - linux-2.6 <unfixed> (embed) [lib/inflate.c]
457 - klibc <unfixed> (embed)
458 NOTE: based on linux-kernel gzip code
459 - busybox <unfixed> (embed)
460 - pristine-tar <unfixed> (modified-embed)
461 NOTE: compression code only, not uncompression
462
463 neon
464 - cadaver 0.22.3+debian-1 (embed; bug #188381)
465 - gnome-vfs2 <unfixed> (embed; bug #395874)
466 [etch] - litmus <unfixed> (embed; #395875)
467 - litmus <removed> (embed; #395875)
468 [sarge] - screem <unfixed> (embed)
469 - sitecopy 1:0.16.0-1 (embed; bug #395876)
470 [etch] - tla <unfixed> (embed; bug #395877)
471 [sarge] - tla <unfixed> (embed; bug #395877)
472
473 libmodplug
474 - gst-plugins-bad0.10 0.10.10.2-1 (embed)
475
476 libvncserver
477 - vino <unfixed> (embed)
478
479 putty
480 - filezilla <unfixed> (embed)
481
482 tinyxml (not packaged in Debian; itp bug #531968)
483 - filezilla <unfixed>
484 - crystalspace <unfixed> (embed)
485 - libwfut <unfixed> (embed)
486 - rarian <unfixed> (embed)
487 - bulletml <unfixed> (embed)
488 - pokerth <unfixed> (embed)
489 - qutecom <unfixed> (embed)
490 - sofa-framework <unfixed> (embed)
491 - yate <unfixed> (embed)
492 - antigrav <unfixed> (embed)
493 - balder2d <unfixed> (embed)
494 - cal3d <unfixed> (embed)
495 - criticalmass <unfixed> (embed)
496 - ember <unfixed> (embed)
497 - epiphany <unfixed> (embed)
498 - gambit <unfixed> (embed)
499 - noiz2sa <unfixed> (embed)
500 - ogre <unfixed> (embed)
501 - opencity <unfixed> (embed)
502 - openmovieeditor <unfixed> (embed)
503 - pouetchess <unfixed> (embed)
504 - tecnoballz <unfixed> (embed)
505 - trigger-rally <unfixed> (embed)
506 - xmoto <unfixed> (embed)
507 - mapnik <unknown> (embed)
508 NOTE: uses a different XML parser by default
509 - rrootage 0.23a-6 <embed>
510 NOTE: links to libbulltetml
511 - boson <unknown> (embed)
512 NOTE: the embedded code is unused
513
514 gv
515 - evince <unfixed> (embed)
516 NOTE: ps/ tree from gv 3.5.8
517 NOTE: evince-gtk is affected (a component of evince source package)
518
519 libXbae
520 - paw <removed> (embed)
521 [etch] - paw <unfixed> (embed)
522
523 libgtkhtml
524 - claws-mail-extra-plugins <unfixed> (fork)
525
526 libXaw
527 - paw <removed> (embed)
528 [etch] - paw <unfixed> (embed)
529 NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
530
531 libgd2
532 - graphviz <unfixed> (embed)
533 NOTE: lib/gd seems to be 2.0.33
534 - wml 2.0.11ds2-1 (embed)
535 - libwmf <unfixed> (embed)
536 NOTE: derived from gd 1.6.3
537 - texlive-bin 2009-1 (embed)
538
539 rar
540 - unrar-nonfree <unfixed> (embed)
541
542 unrar-free (maybe this code is derived from the original rar, too?)
543 - clamav <unfixed> (embed)
544 NOTE: seems to be disabled in default config
545
546 mplayer (DirectMedia Object loader)
547 - xine-lib <unfixed> (embed)
548 NOTE: src/libw32dll/
549 - vlc <unfixed> (embed)
550 NOTE: modules/codec/dmo/
551 - mplayer 1.0~rc2-20 (embed)
552
553 libwpd (WordPerfect converter)
554 - openoffice.org <unfixed> (embed)
555
556 fsplib (http://sourceforge.net/projects/fsp/)
557 - gftp <unfixed> (embed)
558 NOTE: lib/fsplib version 0.3
559
560 sprng
561 - tree-puzzle <unfixed> (embed)
562
563 librpcsecgss
564 - krb5 <unfixed> (embed)
565
566 jasper
567 - ghostscript 8.64~dfsg-2 (embed)
568
569 libiris
570 - psi <unfixed> (embed)
571 - kdenetwork <unfixed> (embed)
572 NOTE: kopete embeds libiris but links dynamically to libidn
573 - kdegames <unfixed> (embed)
574 NOTE: ksirk/kde4
575
576 libidn
577 - monotone 0.43-1 (embed)
578 - psi <unfixed> (embed)
579 NOTE: psi embeds libiris which embeds libidn
580 - kdegames <unfixed> (embed)
581 NOTE: kdegames/kde4 embeds libiris which embeds libidn
582
583 lua5.1
584 - monotone 0.43-1 (embed)
585 - nmap 5.00-1 (embed; bug #527997)
586 [lenny] - nmap <unfixed> (embed; bug #527997)
587 - ocropus <unfixed> (embed)
588 - enigma <unfixed> (embed)
589 NOTE: requires lua built with C++
590 - freeciv <unfixed> (embed)
591 - spring <unfixed> (embed)
592
593 libbotan
594 - monotone 0.43-1 (embed)
595
596 NetXX
597 - monotone 0.43-1 (embed)
598
599 libgc
600 - mono <unfixed> (embed)
601
602 lzma
603 - p7zip <unfixed> (embed)
604 - xz-utils <unfixed> (fork)
605
606 lzo
607 - grub2 <unfixed> (embed)
608
609 yassl
610 - mysql-dfsg-5.0 <unfixed> (embed)
611 - mysql-dfsg-5.1 <unfixed> (embed)
612
613 pax code
614 - tar <unfixed> (embed)
615 - cpio <unfixed> (embed)
616
617 t1lib
618 - tetex-bin 2.0.2-1 (embed)
619 - texlive-bin <unknown> (embed)
620
621 guichan
622 - boswars <unfixed> (embed)
623 NOTE: maintainer notified us, working on it
624
625 tolua
626 - boswars <unfixed> (embed)
627 NOTE: maintainer notified us, working on it
628 NOTE: actually tolua++
629 - ocropus <unfixed> (embed)
630 NOTE: actually tolua++
631 - freeciv <unfixed> (embed)
632 NOTE: actually tolua++
633 - enigma <unfixed> (embed)
634
635 asio-dev
636 - luxrender <removed> (embed)
637
638 xine-lib
639 - vlc <unfixed> (embed)
640 NOTE: only parts included in modules/access/rtsp
641
642 netpbm
643 - tcl8.3 <unfixed> (embed)
644 - tcl8.4 <unfixed> (embed)
645 - tcl8.5 <unfixed> (embed)
646 NOTE: generic/tkImgGIF.c
647
648 tk8.5
649 - tk8.0 <removed> (old-version)
650 - tk8.3 <unfixed> (old-version)
651 - tk8.4 <unfixed> (old-version)
652 - perl-tk <unfixable> (fork)
653
654 samba
655 - mc 2:4.6.2~git20080311-1 (embed)
656 NOTE: maintainer is aware of this, currently searching a solution
657
658 plib1.8.4c2
659 - boson <unfixed> (fork)
660 NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
661
662 fribidi
663 - quesoglc 0.7.2-2 (embed)
664
665 glew
666 - quesoglc <unfixed> (embed; bug #489341)
667 NOTE: waiting on GLEW_MX version of glew (see bug #474488)
668 - trigger 0.5.2.1-2 (embed)
669 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
670 - trigger-rally 0.5.2.1-2 (embed)
671 NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
672
673 minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
674 - transcend <unfixed> (embed)
675 - cultivation <unfixed> (embed)
676 - passage <unfixed> (embed)
677 - gravitation <unfixed> (embed)
678
679 tar
680 - libarchive <unfixed> (embed)
681 NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
682
683 cpio
684 - libarchive <unfixed> (embed)
685 NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
686
687 kde4libs
688 - kdelibs <unfixable> (old-version)
689
690 webkit
691 - qt4-x11 <unfixed> (embed; bug #479851)
692 [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
693 - kde4libs <unfixable> (fork)
694 NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
695 NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
696
697 ftgl
698 - blender 2.46+dfsg-1 (embed)
699
700 wv
701 - abiword <unfixed>
702
703 qemu
704 - kvm <removed> (embed; bug #543159)
705 - qemu-kvm <unfixed> (embed; bug #560853)
706 NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
707 - xen-3 3.4.2-2 (embed; bug #560856)
708 - xen-unstable <unfixed> (embed; bug #560856)
709
710 vgabios
711 - kvm <removed> (embed; bug #489442)
712 - qemu-kvm <unfixed> (embed)
713
714 bochs
715 - kvm <removed> (embed; bug #489442)
716 - qemu-kvm <unfixed> (embed)
717
718 speex
719 - vorbis-tools <unfixed> (embed)
720 NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
721 - gst-plugins-good0.10 <unfixed> (embed)
722 - xine-lib <unfixed> (embed)
723 - libfishsound <unfixed> (embed)
724 - libannodex <removed> (embed)
725 - vlc <unfixed> (embed)
726 - xmms-speex <unfixed> (embed)
727 - libsdl-sound1.2 <unfixed> (embed)
728 - sweep <unfixed> (embed)
729
730 libreadline
731 - magic <itp> (old-version)
732
733 opcode
734 - ode <unfixed> (embed)
735 NOTE: opcode is not a package in debian, it is just embedded
736 NOTE: http://www.codercorner.com/Opcode.htm
737
738 gimpact
739 - ode <unfixed> (embed)
740 NOTE: gimpact is not a package in debian, it is just embedded
741 NOTE: http://gimpact.sf.net
742
743 mochikit
744 - mahara <unfixed> (embed)
745 NOTE: they require extra patches, still unmerged upstream
746 - ntop <unfixed> (embed)
747 - coherence 0.6.2-1 (embed)
748 - paste <unfixed> (embed)
749 - turbogears <unfixed> (embed)
750 - plone3 <removed> (embed)
751 - xulrunner <unfixed> (embed)
752 - libjifty-plugin-chart-perl <unfixed> (embed)
753 - sabnzbdplus <unfixed> (embed)
754 - tgmochikit <unfixed> (embed)
755
756 prototypejs
757 - netbeans-ide 6.0.1+dfsg-2 (embed)
758 - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
759 - webcit <unfixed> (embed; bug #555219)
760 - asterisk 1:1.6.2.0~rc3-1 (embed)
761 - libjson-ruby 1.1.4-1 (embed; bug #555224)
762 - lucene2 2.9.1+ds1-2 (embed; bug #555226)
763 - horde3 <unfixed> (embed)
764 - knowledgeroot 0.9.9.5-1 (embed; bug #555230)
765 - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
766 - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
767 - ebug-http <removed> (embed; bug #555236)
768 - libaws 2.7-1 (embed; bug #555222)
769 - phpgedview <removed> (embed)
770 - poker-network 1.7.6-1 (embed; bug #555238)
771 - rails 2.1.0-6 (embed)
772 - wordpress 2.5.0-2 (embed; bug #555243)
773 - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
774 TODO: search through all of the other zope packages
775 - ampache 3.4.1-2 (embed)
776 - exaile 0.2.14+debian-2.1 (embed; bug #555245)
777 - hobix 0.5~svn20070319-4 (embed; bug #555247)
778 - zabbix 1.6.6-4 (embed; bug #555250)
779 - chora2 <unfixed> (embed; bug #555253)
780 - gollem <unfixed> (embed; bug # 555254)
781 - jscropperui 1.2.1-1 (embed; bug #555257)
782 - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
783 - ingo1 1.2.3+debian0-1 (embed; bug #555261)
784 - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
785 - activeldap <unfixed> (embed)
786 - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
787 - mantis 1.1.2+dfsg-1 (embed; bug #555265)
788 - otrs2 2.3.4-6 (embed; bug #555267)
789 - webcalendar 1.2~b1-2 (embed; bug #555269)
790 - redmine 0.9.0~svn2907-1 (embed; bug #555270)
791 - jifty 0.90519-1 (embed; bug #555271)
792 - jquery 1.4-1 (embed; bug #555272)
793 - passenger 2.2.5debian1-1 (embed; bug #555273)
794 - plone3 <removed> (embed; bug #555275)
795 - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
796 - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
797 - xulrunner <unfixed> (embed)
798 NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
799
800 gdb
801 - insight <unfixed> (embed)
802
803 e2fsprogs
804 - ldiskfsprogs <unfixable> (fork)
805
806 quazip (not packaged in Debian)
807 - qcake <unfixed> (embed)
808 NOTE: starting with upstream version 0.6.4
809
810 exo
811 - pcmanfm <unfixed> (embed; bug #499677)
812 NOTE: slightly modified source code
813
814 java
815 - openjdk-6 <unfixed>
816 - sun-java5 <unfixed>
817 - sun-java6 <unfixed>
818
819 libphp-snoopy
820 - ampache 3.4.1-2 (embed; bug #504169)
821 - gforge 4.6.99+svn6094-2 (embed)
822 - mahara 1.0.5-2 (embed; bug #504170)
823 - pixelpost 1.7.1-5 (embed; bug #504171)
824 - mediamate 0.9.3.6-5 (embed; bug #504172)
825 - opendb <removed> (embed; bug #504173)
826 [etch] - opendb <unfixed> (embed; bug #504173)
827 - wordpress 2.5.1-9 (embed; bug #443948)
828 - moodle <unfixed> (embed; bug #507185)
829 [etch] - phpgroupware <unfixed> (embed)
830 NOTE: phpgroupware-felamimail
831 - magpierss 0.72-3 (embed; bug #431089)
832
833 jquery
834 - zekr <unfixed> (embed)
835 - wordpress <unknown> (embed)
836 - yocto-reader <unfixed> (embed)
837 - textpattern <unfixed> (embed)
838 - genshi 0.5.1-1 (embed)
839 NOTE: compressed file under examples/ dir
840 - prewikka <unfixed> (embed)
841 - libramaze-ruby <unfixed> (embed)
842 - drupal5 <unfixed> (embed)
843 - b2evolution <unfixed> (embed)
844 - wesnoth <unfixed> (embed)
845
846 tablesorter (jquery plugin, not packaged yet)
847 - wesnoth <unfixed> (embed)
848
849 kses
850 - wordpress <unfixed> (embed; bug #504242)
851 NOTE: their copy has all methods renamed to wp_<foo>
852 NOTE: kses isn't in Debian, RFP: #504240
853 - moodle <unfixed> (embed; bug #507185)
854 - egroupware <unfixed> (embed)
855
856 magpierss
857 - wordpress <unfixed> (embed; bug #504242)
858 - moodle <unfixed>
859
860 php-gettext
861 - wordpress 2.8.4-1 (embed; bug #504242)
862 - docbookwiki <unfixed> (embed)
863 - knowledgeroot 0.9.9.5-1
864 NOTE: non-free
865
866 libphp-ixr (name may change, it is the Incutio XML-RPC)
867 - wordpress <unfixed> (embed; bug #504242)
868 NOTE: libphp-ixr isn't in Debian, RFP: #504236
869 - dokuwiki <unfixed> (embed)
870 - textpattern <unfixed> (embed)
871
872 libphp-cas
873 - glpi <unfixed> (embed)
874 - moodle <unfixed> (embed; bug #505984)
875
876 scriptaculous (prototype.js is among the embeds in the following)
877 - glpi <unfixed> (embed)
878 - libaws <unfixed> (embed; bug #555222)
879 - op-panel <unfixed> (embed)
880 - symfony <unfixed> (embed)
881 NOTE: maintainer says there are extra incompatible changes required
882 - pixelpost 1.7.1-6 (embed)
883 - webhelpers <unfixed> (embed)
884 - qwik <removed> (embed; bug #555241)
885 - smokeping <unfixed> (embed)
886 - turba2 <unfixed> (embed)
887 - typo3-src 4.2.3-1 (embed)
888 - request-tracker3.6 <unfixed> (embed)
889 - request-tracker3.8 <unfixed> (embed)
890 - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
891 - wordpress 2.5.0-2 (embed)
892 - libhtml-prototype-perl 1.48-3 (embed)
893
894 libmarkdown-php
895 - moodle <unfixed> (embed; bug #507185)
896 - pixelpost 1.7.1-6 (embed)
897
898 php-openid
899 - wordpress-openid <itp> (embed)
900
901 geshi
902 - dokuwiki 0.0.20080505-3.1 (embed)
903 - pgfouine 1.0-1.1 (embed)
904 - websvn 2.1.0-1 (embed)
905
906 webcalendar
907 - gforge 4.7~rc2-6 (embed; bug #504758)
908
909 libical
910 - kdepim <unknown> (fork)
911 NOTE: fixed at some point during 4.0
912 - kdepimlibs 4.2.0-1 (fork)
913 - claws-mail-extra-plugins <unfixed> (fork)
914
915 harfbuzz
916 - qt4-x11 <unfixed> (embed)
917 - pango1.0 <unfixed> (embed)
918 - fontmatrix <unfixed> (embed)
919
920 libzip
921 - php5 <unfixable> (modified-embed)
922 - odt2txt <unfixed> (embed; bug #523808)
923
924 json.php (not packaged; should be replaced with php's built-in functions)
925 - moodle <unfixed>
926 - yui <unfixed>
927 - gallery2 <unfixed>
928 - dokuwiki <unfixed>
929 - typo3-src <unfixed>
930
931 php-fpdf
932 - tcpdf <itp> (fork)
933 - moodle <unfixed>
934 - phpwiki <unfixed>
935 - egroupware <unfixed>
936 - ldap-account-manager <unfixed> (fork)
937
938 tcpdf (itp: #495985)
939 - moodle <unfixed>
940 - phpmyadmin <unfixed>
941
942 typo3
943 - moodle <unfixed>
944
945 spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
946 - moodle <unfixed>
947 - gosa <unfixed>
948
949 php-ole (itp: #487558)
950 - moodle <unfixed>
951
952 pieforms (http://www.catalyst.net.nz)
953 - mahara <unfixed>
954
955 savant2 (http://phpsavant.com)
956 - egroupware <unfixed>
957
958 rssparser (http://nwow.org)
959 - egroupware <unfixed>
960 - phpgroupware <unfixed>
961
962 lcms
963 - openjdk-6 <unfixed> (fork)
964 - gimp 2.4.0~rc2-2
965
966 libphp-phplayersmenu
967 - diogenes <unfixed>
968 - phpldapadmin <unfixed>
969
970 libphp-pclzip
971 - docvert <unfixed>
972 - moodle <unfixed>
973 - egroupware <unfixed>
974
975 libphp-simplepie
976 - dokuwiki <unfixed>
977 - wordpress <unfixed>
978
979 libphp-jpgraph
980 - egroupware <unfixed>
981
982 php-simpletest
983 - moodle <unfixed>
984
985 libpng
986 - iceweasel <not-affected> (uses xulrunner)
987 - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
988 - iceape 1.0.13~pre080614i-0etch1 (embed)
989 - xulrunner 1.9.0.13-1 (embed)
990 [lenny] - xulrunner 1.9.0.11-0lenny1
991 [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
992 - gamera 3.2.3-1 (embed)
993 - freeimage <unfixed> (embed)
994 - tuxonice-userui (static)
995
996 irssi
997 - silc-client <unfixed> (embed)
998 NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
999
1000 extc
1001 - mtasc <unfixed> (embed)
1002 - haxe <unfixed> (embed)
1003
1004 swflib
1005 - mtasc <unfixed> (embed)
1006 - haxe <unfixed> (embed)
1007
1008 libitext-java
1009 - bouncycastle 2.1.4-1 (embed)
1010
1011 python-ply
1012 - pyke <unfixed> (embed; bug #555363)
1013 - pywbem 0.7.0-4 (embed; bug #555364)
1014 - sepolgen <unfixed> (embed; bug #555365)
1015 - zope-textindexng3 <unknown> (embed)
1016 - iceweasel <not-affected> (uses xulrunner)
1017 - xulrunner <unknown> (embed)
1018 - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
1019
1020 libdumbnet (libdnet upstream)
1021 - nmap <unfixed> (fork)
1022
1023 gcc-4.4
1024 - gcc-mingw32 <unfixed> (embed)
1025
1026 camlimages
1027 - advi <unfixed> (static; bug #550441)
1028
1029 memcached
1030 - memcachedb <unfixed> (embed)
1031
1032 yajl
1033 - argyll <unfixed> (embed; bug #544223)
1034 NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1035
1036 nusoap
1037 - gforge 4.8.2-1 (embed)
1038 - ampache <unfixed> (embed)
1039 - poker-network <unfixed> (embed)
1040 - moodle <unfixed> (embed)
1041 NOTE: code is not used when running under php5 and soap is enabled
1042 - phpwiki <unfixed> (embed)
1043 - gallery2 <unfixed> (embed)
1044 - typo3-src <unfixed> (embed)
1045
1046 libept
1047 - adept <unfixed> (embed; bug #540649)
1048
1049 libvorbis
1050 - iceweasel <not-affected> (uses xulrunner)
1051 - xulrunner <unfixed> (embed; bug #540959)
1052 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1053 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1054 - iceape <unfixed> (embed)
1055 [etch] - iceape <not-affected> (introduced in 2.0)
1056 [lenny] - iceape <not-affected> (introduced in 2.0)
1057
1058 cairo
1059 - iceweasel <not-affected> (uses xulrunner)
1060 - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1061
1062 liboggz
1063 - iceweasel <not-affected> (uses xulrunner)
1064 - xulrunner <unfixed> (embed; bug #540959)
1065 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1066 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1067 - iceape <unfixed> (embed)
1068 [etch] - iceape <not-affected> (introduced in 2.0)
1069 [lenny] - iceape <not-affected> (introduced in 2.0)
1070
1071 liboggplay
1072 - iceweasel <not-affected> (uses xulrunner)
1073 - xulrunner <unfixed> (embed; bug #540959)
1074 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1075 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1076 - iceape <unfixed> (embed)
1077 [etch] - iceape <not-affected> (introduced in 2.0)
1078 [lenny] - iceape <not-affected> (introduced in 2.0)
1079
1080 php-net-dnsbl
1081 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1082
1083 php-onyx-rss
1084 - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
1085
1086 php-text-wiki
1087 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1088
1089 php-xml-rpc
1090 - serendipity <unfixed> (embed; bug #541740; package in NEW)
1091
1092 polarssl (does not have a shared library)
1093 - pdkim <itp> (embed; bug #543150)
1094 - xyssl <unfixed> (old-version)
1095
1096 pidgin (libpurple)
1097 - gaim <removed> (old-version)
1098 - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
1099
1100 icu
1101 - webkit 1.0.1-1 (embed; bug #547214)
1102 - texlive-bin <unfixed> (fork)
1103 NOTE: texlive upstream working with icu upstream to merge their changes
1104
1105 cyrus-imapd-2.2
1106 - kolab-cyrus-imapd <unfixed> (fork)
1107 - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1108
1109 python-cxx-dev
1110 - freecad 0.9.2646.3-1 (embed; bug #547936)
1111
1112 zipios++
1113 - freecad 0.9.2646.3-1 (embed; bug #547941)
1114 - enigma 0.92.3-3 (embed)
1115 NOTE: likely fixed earlier, marking etch's version as fixed
1116
1117 linux-2.6
1118 - kvm <removed> (embed; bug #549973) [./kernel/*]
1119 - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1120 - kernel-source-2.6.8 <removed> (old-version)
1121 - kernel-source-2.4.27 <removed> (old-version)
1122 - kernel-source-2.4.24 <removed> (old-version)
1123 - kernel-source-2.2.25 <removed> (old-version)
1124 - kernel-source-2.2.20 <removed> (old-version)
1125
1126 libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1127 - kvm <removed> (embed) [./libfdt/*]
1128 - qemu-kvm <unfixed> (embed) [./libfdt/*]
1129
1130 qweb (not packaged)
1131 - ajaxterm <unfixed>
1132
1133 opensaml2
1134 - opensaml <removed> (old-version)
1135
1136 shibboleth-sp2
1137 - shibboleth-sp <removed> (old-version)
1138
1139 tuxonice-userui
1140 - suspend2-userui <removed> (old-version)
1141
1142 expat
1143 - w3c-libwww <removed> (embed; bug #551941)
1144 [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1145 - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1146 - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1147 - python2.4 <unfixable> (embed; bug #553403)
1148 - python-4suite <unfixed> (embed; bug #516935)
1149 - wxwindows2.4 <removed> (embed)
1150 - wxwidgets2.6 2.6.3.2.2-4 (embed)
1151 - wxwidgets2.8 2.8.10.1-2 (embed)
1152 - celementtree 1.0.5-8 (embed)
1153 NOTE: Maybe that was fixed even earlier
1154 - audacity 1.3.2-1 (embed)
1155 - matanza <unfixed> (embed)
1156 - tdom 0.8.3~20080525-1 (embed)
1157 - udunits 2.1.8-4 (embed)
1158 - apr-util 1.2 (embed)
1159 - ayttm <unfxed> (embed; bug #561006)
1160 - cableswig <unfixed> (embed)
1161 - cadaver <unfixed> (embed)
1162 - cmake 2.6.0-6 (embed)
1163 - coin3 <unfixed> (embed)
1164 - gdcm 2.0.14-2 (embed)
1165 - ghostscript 8.71~dfsg-2 (embed)
1166 - grmonitor <removed> (embed)
1167 - iceape <unfixed> (embed)
1168 - insighttoolkit 3.16.0-1 (embed)
1169 NOTE: insighttoolkit might've been fixed earlier
1170 - libparagui1.1 1.0.2-1 (embed)
1171 - paraview 3.6.2-1 (embed)
1172 - poco 1.3.6p1-1 (embed)
1173 - simgear <unfixed> (embed)
1174 - sitecopy 1:0.16.0-1
1175 - smart <unfixed> (embed)
1176 NOTE: smart embeds celementree, and it includes expat
1177 - swish-e <not-affected> (Linked against libxml, which is used instead)
1178 - tla 1.3.5+dfsg-15 (embed)
1179 - vtk 4.1.20030227-1 (embed)
1180 - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
1181 - xmlrpc-c <unfixed> (embed)
1182 - iceweasel <unfixed> (embed)
1183 - kompozer <unfixed> (embed)
1184 - vxl 1.13.0-2 (embed)
1185 - xulrunner <unfixed> (embed)
1186 - apache2 2.2 (embed)
1187 - texlive-bin <not-affected> (Embedded code not compiled in)
1188 - vnc4 <unfixed> (embed)
1189 - xotcl 1.6.6-1 (embed)
1190
1191 xerces-c
1192 - xerces-c2 <unfixed> (old-version)
1193 - xerces27 <removed> (old-version)
1194
1195 md5 (RSA's version; not the gnu version provided by coreutils)
1196 - w3c-libwww <removed> (embed; bug #551942)
1197 [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1198
1199 libparagui1.1
1200 - asc <unfixable> (fork)
1201
1202 enet
1203 - sauerbraten <unfixed> (embed; #497194)
1204
1205 eglibc
1206 - glibc <removed> (old-version)
1207
1208 galib
1209 - gamera 3.2.3-1 (embed)
1210
1211 configobj
1212 - bzr 2.1.0~rc2-1 (embed; bug #555336)
1213 - elisa <unfixed> (embed; bug #555337)
1214 - gaupol <unfixed> (embed; bug #555338)
1215 - ipython <unfixed> (embed; bug #555339)
1216 - pida <unfixed> (embed; bug #555340)
1217 - psychopy <unfixed> (embed; bug #555341)
1218 - rest2web <unfixed> (embed; bug #555342)
1219 - auth2db <unknown> (embed)
1220 - dynagen <unknown> (embed)
1221 - iceweasel <unknown> (embed)
1222 - sabnzbdplus <unknown> (embed)
1223 - xulrunner <unknown> (embed)
1224 - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1225
1226 python-clientform
1227 - bibus <unfixed> (embed; bug #555332)
1228 - zope2.10 <unfixed> (embed; bug #555333)
1229 - zope2.11 <removed> (embed; bug #555334)
1230 - python-mechanize <unknown> (embed)
1231 - twill <unknown> (embed)
1232
1233 python-mechanize
1234 - zope2.10 <unfixed> (embed; bug #555337)
1235 - zope2.11 <removed> (embed; bug #555338)
1236 - twill <unknown> (embed; bug #555339)
1237
1238 pexpect
1239 - duplicity 0.6.06-1 (embed; bug #555361)
1240 - hplip <unfixed> (embed; bug #555362)
1241 - smart <unfixed> (embed; bug #555363)
1242
1243 pyparsing
1244 - bauble <unfixed> (embed; bug #555366)
1245 - boa-constructor 0.6.1-8 (embed; bug #555367)
1246 - calibre <unfixed> (embed; bug #555368)
1247 - matplotlib <unfixed> (embed; bug #531024)
1248 - zhpy 1.7.3.1-1 (embed; bug #555370)
1249 - polybori <unknown> (embed)
1250 - python-whoosh <unknown> (embed)
1251 - twill <unknown> (embed)
1252 - zope-textindexng3 <unknown> (embed)
1253
1254 python-pysqlite2
1255 - python2.4 <unfixed> (embed; bug #553403)
1256 - python2.5 <unfixed> (embed; bug #553403)
1257
1258 celementtree
1259 - python2.5 <unfixed> (embed)
1260 - smart <unfixed> (embed)
1261
1262 elementtree
1263 - python2.5 <unfixed> (embed)
1264 - python2.6 <unfixed> (embed)
1265 - bzr 2.1.0~rc2-1 (embed; bug #555343)
1266 - gedit 2.28.2-1 (embed; bug #555344)
1267 - smart <unfixed> (embed)
1268 - solfege <unfixed> (embed; bug #555345)
1269 - w3af <unfixed> (embed; bug #555346)
1270 - python-qt4 <unknown> (embed)
1271 - sphinx <unknown> (embed)
1272 - python-nltk <itp> (embed)
1273
1274 python2.5
1275 - python2.4 <unfixed> (old-version)
1276 - jython <unfixed> (embed)
1277 NOTE: embeds many stdlib modules
1278 - python-django <unfixed> (embed; bug #555419)
1279 NOTE: embeds stdlib modules: doctest, decimal
1280 - gamera 3.2.3-1 (embed)
1281 NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1282 - boa-constructor <unfixed> (embed; bug #555426)
1283 NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1284 - nicotine <unfixed> (embed; bug #555427)
1285 NOTE: embeds stdlib modules: ConfigParser
1286 - museek+ <unfixed> (embed; bug #555428)
1287 NOTE: embeds stdlib modules: ConfigParser
1288 - vegastrike-data <unfixed> (embed)
1289 NOTE: embeds many stdlib modules
1290 - codespeak-lib 1.1.1-1 (embed; bug #555420)
1291 NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1292 - config-manager <unfixed> (embed; bug #555423)
1293 NOTE: embeds stdlib modules: optparse
1294 - jhbuild 2.28.0-1 (embed; bug #555421)
1295 NOTE: embeds stdlib modules: optparse, subprocess
1296 - smart <unfixed> (embed; bug #555432)
1297 NOTE: embeds stdlib modules: optparse
1298 - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1299 NOTE: embeds stdlib modules: doctest
1300 - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1301 NOTE: embeds stdlib modules: doctest
1302 - distribute <unfixed> (embed)
1303 NOTE: embeds stdlib modules: doctest
1304 - python-setuptools <unfixed> (embed; bug #555435)
1305 NOTE: embeds stdlib modules: doctest
1306 - zope.testing <unfixed> (embed; bug #555436)
1307 NOTE: embeds stdlib modules: doctest
1308 - translate-toolkit <unfixed> (embed; bug #555422)
1309 NOTE: embeds stdlib modules: textwrap, contextlib
1310 - libtpclient-py <unfixed> (embed; bug #555424)
1311 NOTE: embeds stdlib modules: subprocess
1312 - grass <unfixed> (embed; bug #555425)
1313 NOTE: embeds stdlib modules: subprocess
1314 - coherence <unfixed> (embed; bug #555429)
1315 NOTE: embeds stdlib modules: uuid
1316 - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1317 NOTE: embeds stdlib modules: uuid
1318 - setroubleshoot <unfixed> (embed; bug #555431)
1319 NOTE: embeds stdlib modules: uuid
1320 - linkchecker <unfixed> (embed; bug #555414)
1321 NOTE: embeds msgfmt.py script
1322 - imdbpy <unfixed> (embed)
1323 NOTE: embeds msgfmt.py script
1324 - kiwi <unfixed> (embed)
1325 NOTE: embeds msgfmt.py script
1326 - moin <unfixed> (embed)
1327 NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1328 - plone3 <removed> (embed)
1329 NOTE: embeds msgfmt.py script
1330 - roundup <unfixed> (embed)
1331 NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1332 - rednotebook <unfixed> (embed; bug #555415)
1333 NOTE: embeds msgfmt.py script
1334 - turbogears <unfixed> (embed)
1335 NOTE: embeds msgfmt.py script
1336 - elisa <unfixed> (embed)
1337 NOTE: embeds msgfmt.py script, stdlib modules: uuid
1338 - calibre <unfixed> (embed)
1339 NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1340 - mailman 1:2.1.13-1 (embed; #555416)
1341 NOTE: embeds msgfmt.py script
1342 - python-docutils <unknown> (embed)
1343 NOTE: embeds stdlib modules: optparse, textwrap
1344 - python-imaging <unknown> (embed)
1345 NOTE: embeds stdlib modules: doctest
1346 - python-mechanize <unknown> (embed)
1347 NOTE: embeds stdlib modules: doctest
1348 - twill <unknown> (embed)
1349 NOTE: embeds stdlib modules: subprocess
1350 - zeroc-ice <unknown> (embed)
1351 NOTE: embeds stdlib modules: subprocess
1352 - wxwidgets2.8 <unknown> (embed)
1353 NOTE: embeds stdlib modules: subprocess
1354 - cycle <unknown> (embed)
1355 NOTE: embeds msgfmt.py script
1356 - deluge <unknown> (embed)
1357 NOTE: embeds msgfmt.py script
1358 - opendict <unknown> (embed)
1359 NOTE: embeds msgfmt.py script
1360 - openerp-client <unknown> (embed)
1361 NOTE: embeds msgfmt.py script
1362 - rapidsvn <unknown> (embed)
1363 NOTE: embeds msgfmt.py script
1364 - wammu <unknown> (embed)
1365 NOTE: embeds msgfmt.py script
1366 - gaphor <unknown> (embed)
1367 NOTE: embeds msgfmt.py script
1368 - pida <unknown> (embed)
1369 NOTE: embeds msgfmt.py script
1370 - python-formencode <unknown> (embed)
1371 NOTE: embeds msgfmt.py script
1372 - duplicity <unfixed> (embed)
1373 NOTE: embeds stdlib module: urlparse, tarfile
1374 - pygopherd <unfixed> (embed)
1375 NOTE: embeds stdlib module: zipfile
1376
1377 argparse
1378 - twill <unfixed> (embed; bug #555347)
1379 - ipython <unfixed> (embed; bug #555348)
1380
1381 coherence
1382 - elisa <unfixed> (embed; bug #555335)
1383
1384 simpletal
1385 - plastex <unfixed> (embed; bug #555371)
1386
1387 flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1388 - postr <unfixed> (embed)
1389 - elisa <unfixed> (embed)
1390
1391 simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1392 - apertium-tolk <unfixed> (embed)
1393 - ipython <unfixed> (embed)
1394 - virtaal <unfixed> (embed)
1395
1396 distribute
1397 - setuptools <removed> (old-version)
1398
1399 rails
1400 - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1401 - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1402 - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1403 - thin <unfixed> (embed) [./spec/rails_app/*]
1404 NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1405 NOTE: be dangerous if developers are naively basing their code off of the examples
1406 NOTE: prototype.js is among the example files
1407
1408 lucene2 (prototype.js is among the embeds in the following)
1409 - lucene <unfixed> (old-version)
1410 - pylucene <unfixed> (embed)
1411 - libpdfbox-java <unfixed> (embed)
1412 - libfontbox-java <unfixed> (embed)
1413 - libjempbox-java <unfixed> (embed)
1414 - solr <unfixed> (embed)
1415
1416 unicode-data
1417 - syslinux <unfixed> (embed)
1418 - camomile <unfixed> (embed)
1419 - fribidi <unfixed> (embed)
1420 - m17n-db <unfixed> (embed)
1421 - sbcl <unfixed> (embed)
1422 - heimdal <unfixed> (embed)
1423 - icu <unfixed> (embed)
1424 - icu4j <unfixed> (embed)
1425 - krb5 <unfixed> (embed)
1426 - moodle <unfixed> (embed)
1427 - openldap <unfixed> (embed)
1428 - pike7.6 <unfixed> (embed)
1429 - samba <unfixed> (embed)
1430 - samba4 <unfixed> (embed)
1431 - cmucl <unfixed> (embed)
1432 - typo3-src <unfixed> (embed)
1433 - mauve <unfixed> (embed)
1434 - texlive-bin <unfixed> (embed)
1435 - ypsilon <unfixed> (embed)
1436 - jeuclid <unfixed> (embed)
1437 - charmap.app <unfixed> (embed)
1438 - clisp <unfixed> (embed)
1439 - gnulib <unfixed> (embed)
1440 - opensrs-client <unfixed> (embed)
1441 - saxonb <unfixed> (embed)
1442 - rails <unfixed> (embed)
1443
1444 feedparser
1445 - rawdog <unfixed> (embed; bug #383422)
1446 - miro <unfixed> (embed; bug #555351)
1447 - calibre <unfixed> (embed; bug #555352)
1448 - freevo <unfixed> (embed; bug #555353)
1449 - pida <unfixed> (embed; bug #555354)
1450 - planet-venus <unfixed> (embed; bug #555355)
1451 - plone3 <removed> (embed; bug #555356)
1452 - exaile 0.2.14+debian-1 (embed)
1453 - screenlets 0.1.2-3 (embed)
1454 NOTE: included twice
1455
1456 agg:
1457 - matplotlib <unfixed> (embed: bug #377271)
1458 - contextfree <unfixed> (embed)
1459 NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1460 - exactimage <unfixed> (embed)
1461 - python-enable <unfixed> (embed)
1462 - mapnik 0.5.1-3 (embed)
1463 NOTE: links statically to agg, but shared library is not available (bug #377271)
1464
1465 vtk
1466 - paraview <unfixable> (embed; bug #495426)
1467
1468 txt2tags
1469 - rednotebook <unfixed> (embed)
1470
1471 htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1472 - gajim <unfixed> (embed)
1473 - emesene <unfixed> (embed)
1474 - convirt <unfixed> (embed)
1475 - pida <unfixed> (embed)
1476 - rednotebook <unfixed> (embed)
1477
1478 horde3 (prototype.js is among the embeds in the following)
1479 - mnemo2 <unfixed> (embed)
1480 - nag2 <unfixed> (embed)
1481 - wordpress <unfixed> (embed)
1482 NOTE: Text_Diff (wp-includes/Text/Diff*)
1483
1484 cimg
1485 - gmic <itp> (embed)
1486
1487 mootools
1488 - gmic <itp> (embed)
1489
1490 openldap
1491 - openldap2.3 <removed> (old-version)
1492
1493 grub2
1494 - grub <unfixed> (old-version)
1495
1496 gnupginterface
1497 - duplicity <unfixed> (embed)
1498
1499 python-dateutil
1500 - awn-extras-applets <unfixed> (embed)
1501 - matplotlib <unknown> (embed)
1502
1503 cups
1504 - cupsys <removed> (old-version)
1505
1506 yui
1507 - bcfg2 <not-affected> (present in source but not included in any binary files)
1508 - serendipity 1.5.3-1 (embed; bug #557746)
1509 - moodle 1.8.2.dfsg-5 (embed)
1510 - jifty 0.91117-1 (embed; bug #557748)
1511 - webgui 7.7.26-1 (embed)
1512 - loggerhead 1.17-1 (embed)
1513
1514 quake3 (vanilla source not packaged in debian)
1515 - openarena <unfixable> (fork)
1516
1517 quake2 (vanilla source not packaged in debian)
1518 - alien-arena <unfixable> (fork)
1519 - warsow <unfixable> (fork)
1520
1521 libtheora
1522 - iceweasel <not-affected> (uses xulrunner)
1523 - xulrunner <unfixed> (embed; bug #540959)
1524 [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1525 [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1526 - iceape <unfixed> (embed; bug #559276)
1527 [etch] - iceape <not-affected> (introduced in iceape 2.0)
1528 [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1529
1530 dtoa
1531 - bfilter <unfixed> (embed)
1532 - cacao <unfixed> (embed)
1533 - cdrdao <unfixed> (embed)
1534 - classpath <unfixed> (embed)
1535 - freej <unfixed> (embed)
1536 - iceape <unfixed> (embed)
1537 - iceweasel <unfixed> (embed)
1538 - jscoverage <unfixed> (embed)
1539 - kde4libs <unfixed> (embed)
1540 - kdelibs <unfixed> (embed)
1541 - kompozer <unfixed> (embed)
1542 - libv8 <unfixed> (embed)
1543 - mono <unfixed> (embed)
1544 - newlib <unfixed> (embed)
1545 - nspr <unfixed> (embed)
1546 - php5 <unfixed> (embed)
1547 - polyml <unfixed> (embed)
1548 - qt4-x11 <unfixed> (embed)
1549 - rhino <unfixed> (embed)
1550 NOTE: code translated to Java
1551 - ruby1.8 <unfixed> (embed)
1552 - ruby1.9 <unfixed> (embed)
1553 - ruby1.9.1 <unfixed> (embed)
1554 - sdd <unfixed> (embed)
1555 - sfind <unfixed> (embed)
1556 - star <unfixed> (embed)
1557 - tinymux <unfixed> (embed)
1558 - virtualbox-ose <unfixed> (embed)
1559 - webkit <unfixed> (embed)
1560 - xulrunner <unfixed> (embed)
1561
1562 ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1563 - firegpg <unfixed> (embed)
1564 - enigmail <unfixed> (embed)
1565
1566 ptmalloc (not packaged in Debian)
1567 - crystalspace <unfixed> (embed)
1568 - qt4-x11 <unfixed> (embed)
1569
1570 svgalib
1571 - usplash <unfixed> (embed)
1572
1573 bogl
1574 - usplash <unfixed> (embed)
1575
1576 taglist
1577 - usplash <unfixed> (embed)
1578
1579 portaudio
1580 - audacity <unfixed> (embed; bug #323711)
1581
1582 nyquist
1583 - audacity <unfixed> (embed)
1584 NOTE: embeds a forked nyquist with support for a shared library
1585
1586 vamp-plugin-sdk
1587 - audacity <unfixed> (embed)
1588
1589 wordpress
1590 - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1591 - wordpress-mu <removed> (fork)
1592
1593 php5
1594 - php4 <removed> (old-version)
1595
1596 classpath
1597 - libgnucrypto-java <removed> (embed; bug #559788)
1598
1599 libtool
1600 - apr <unfixed> (static; bug #489625)
1601 NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1602 - arts <unfixed> (embed)
1603 - bochs 2.4.2-1 (embed; bug #560884)
1604 - camserv <unfixed> (embed)
1605 - collectd 4.8.2-1 (embed)
1606 - courier-authlib 0.58-4 (embed)
1607 NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1608 - cvsnt 2.5.04.3236-1.2 (embed)
1609 - dico <not-affected> (Uses the system copy of ltdl)
1610 - freeradius 0.1+20010527-1 (embed)
1611 NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1612 - ggobi 2.1.9~20091212-1 (embed)
1613 - glame 2.0.1-4 (embed)
1614 NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1615 - gnash 0.8.7-2 (embed)
1616 - gnu-smalltalk <unfixed> (embed; bug #566777)
1617 - google-gadgets 0.10.5-0.3 (embed)
1618 NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1619 - graphicsmagick 1.3.5-6 (embed)
1620 - graphviz 2.8-3 (embed)
1621 NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1622 - guile-1.6 1.6.8-7 (embed)
1623 - hamlib <unfixed> (embed)
1624 - hercules 3.06-1.2 (embed)
1625 - jags 1.0.4-3 (embed; bug #560864)
1626 - kdelibs <unfixed> (embed)
1627 - libannodex <removed> (embed)
1628 - libextractor 0.5.23+dfsg-4 (embed)
1629 - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1630 - libtunepimp 0.5.3-7.3 (embed)
1631 - mp4h 1.3.1-4.1 (embed)
1632 - naim <removed> (embed)
1633 - parser-mysql <unfixed> (embed)
1634 - pinball 0.3.1-11 (embed)
1635 - redland <unfixed> (embed)
1636 - siproxd <unfixed> (embed)
1637 - ski <unfixed> (embed)
1638 - synfig 0.62.00-1 (embed)
1639 - unixodbc 2.2.4-5 (embed)
1640 - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1641 - clamav 0.95+dfsg-1 (embed)
1642 - imagemagick 6:6.2.3.1-1 (embed)
1643 - hypre 2.4.0b-5 (embed)
1644 - lam <unfixed> (embed)
1645 - openmpi <unfixable> (embed; bug #559386)
1646 - parser <unfixed> (embed)
1647 - pdsh 2.18-5 (embed; bug #560892)
1648 - sbnc 1.2-8 (embed)
1649 - sdcc <unfixed> (embed)
1650 - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
1651 - proftpd-dfsg <unfixed> (embed; bug #561748)
1652 - babel 1.4.0.dfsg-5 (embed)
1653 - libprelude 0.9.14-2 (embed)
1654 - heartbeat 2.1.4-7 (embed)
1655 NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1656 NOTE: might've been fixed earlier
1657 - gcc-* <unknown> (embed)
1658
1659 ocamlgsl
1660 - orpie 1.5.1-7.1 (embed; bug #550058)
1661
1662 xdotool
1663 - keynav <unfixed> (embed; bug #560103)
1664
1665 bulletphysics (not packaged; http://www.bulletphysics.org/)
1666 - supertuxkart <unfixed> (embed)
1667 - blender <unfixed> (embed)
1668
1669 ghostscript
1670 - gs-gpl <removed> (old-version)
1671
1672 icedove
1673 - thunderbird <removed> (old-version)
1674
1675 sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1676 - jquery <unfixed> (embed)
1677
1678 sed
1679 - ssed <unfixed> (fork)
1680
1681 phpatomlib (http://code.google.com/p/phpatomlib)
1682 - wordpress <unfixed> (embed)
1683
1684 Services_JSON (http://pear.php.net/package/Services_JSON)
1685 - wordpress <unfixed> (embed)
1686
1687 phpass (http://www.openwall.com/phpass/)
1688 - gallery2 <unfixed> (embed)
1689 - wordpress <unfixed> (embed)
1690 - typo3-src <unfixed> (modified-embed)
1691 NOTE: file refers to drupal, maybe there's a copy somewhere there
1692 NOTE: a copyright owner search didn't match anything
1693 - libauthen-passphrase-perl <unfixable> (fork)
1694 NOTE: perl implementation of phpass
1695
1696 squirrelmail
1697 - wordpress <unfixed> (embed)
1698 NOTE: class-pop3.php
1699
1700 ezSQL (http://www.woyano.com/jv/ezsql)
1701 - wordpress <unfixable> (fork)
1702 NOTE: wp-db.php
1703
1704 Diff.php (Clay Loveless' version/killersoft.com)
1705 - php-versioncontrol-svn <unfixed>
1706
1707 libm (provided by libc)
1708 - spring <unfixed> (embed)
1709 NOTE: embedded by embedded copy of streflop
1710 - aide <unfixed> (static)
1711 - busybox <unfixed> (static)
1712 - mindi-busybox <unfixed> (static)
1713 - qemu <unfixed> (static)
1714 NOTE: qemu-user-static
1715 - tuxonice-userui <unfixed> (static)
1716 - zsh <unfixed> (static)
1717 NOTE: zsh-static
1718
1719 streflop
1720 - spring <unfixed> (embed)
1721
1722 minizip
1723 - spring <unfixed> (embed)
1724
1725 oscpack
1726 - spring <unfixed> (embed)
1727
1728 hpiutil2
1729 - spring <unfixed> (embed)
1730
1731 p7zip
1732 - spring <unfixed> (embed)
1733
1734 pythonqt (doesn't seem to be python-qtN, unknown source)
1735 - fontmatrix <unfixed> (embed)
1736 - elmerfem <unfixed> (embed)
1737
1738 iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1739 - docvert <unfixed> (embed)
1740 - jifty <unfixed> (embed)
1741 - kdenetwork <unfixed> (embed)
1742 - mediatomb <unfixed> (embed)
1743 - plastex <unfixed> (embed)
1744 - plone3 <removed> (embed)
1745 - python-chaco <unfixed> (embed)
1746 - python-docutils <unfixed> (embed)
1747 - s5 <unfixed> (embed)
1748 - zope2.10 <unfixed> (embed)
1749 - zope2.11 <removed> (embed)
1750 - cython <not-affcted> (embed)
1751 NOTE: part of documentation, which is not installed into the binary package
1752
1753 python-docutils
1754 - zope2.10 <unfixed> (embed)
1755 - zope2.11 <removed> (embed)
1756
1757 tesseract
1758 - ocropus <unfixed> (static)
1759
1760 antlr
1761 - kdevelop <unfixed> (embed)
1762
1763 libxerces2
1764 - openjdk-6 <unfixed> (embed)
1765
1766 kfreebsd-8
1767 - kfreebsd-7 <unfixed> (old-version)
1768 - kfreebsd-6 <removed> (old-version)
1769
1770 ruby1.9.1
1771 - ruby1.9 <unfixed> (old-version)
1772 - ruby1.8 <unfixed> (old-version)
1773
1774 maildrop
1775 - courier <unfixed> (embed) [./maildrop]
1776
1777 glee
1778 - warzone2100 <unfixed> (embed)
1779
1780 phing
1781 - symfony <unfixed> (embed)
1782
1783 pake
1784 - symfony <unfixed> (embed)
1785
1786 propel
1787 - symfony <unfixed> (embed)
1788
1789 creole
1790 - symfony <unfixed> (embed)
1791
1792 hfsutils
1793 - cdrkit <unfixed> (embed; bug #570187)
1794 NOTE: embeds hfsutils code in genisoimage
1795
1796 cdrkit
1797 - grub2 <unfixed> (embed; bug #570156)
1798 NOTE: genisoimage imported into grub-mkisofs
1799
1800 kdebase-workspace
1801 - kdebase <unfixed> (old-version)
1802
1803 file
1804 - php5 <unfixable> (modified-embed)
1805 [lenny] - php5 <not-affected>
1806
1807 cdb
1808 - php5 <unfixed> (embed)
1809
1810 libmbfl (itp: #570708)
1811 - php5 <unfixed> (embed)
1812 NOTE: PHP is actually the current upstream, ITP is of that code
1813
1814 libonig
1815 - php5 5.3.2-1 (embed)
1816
1817 xmlrpc-epi
1818 - php5 <unfixed> (embed)
1819
1820 swt-gtk
1821 - eclipse <unfixed> (embed; bug #538808)
1822
1823 txt2html
1824 - wml 2.0.11ds2-1 (embed)
1825
1826 ca-certificates
1827 - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
1828
1829 openexr
1830 - freeimage <unfixed> (embed)
1831
1832 libmng
1833 - freeimage <unfixed> (embed)
1834
1835 openjpeg
1836 - freeimage <unfixed> (embed)
1837
1838 libjpeg6b
1839 - freeimage <unfixed> (embed)
1840
1841 libjpeg (don't know what exact version)
1842 - dcmtk <unfixed>
1843 - gdcm <unfixed>
1844 - insighttoolkit <unfixed>
1845 - openarena <unfixed>
1846 - outguess <unfixed>
1847 - squeak-vm <unfixed> (embed)
1848 - tremulous <unfixed>
1849 - tuxonice-userui <unfixed> (static)
1850 - fpc <unfixed> (static)
1851 - lazarus <unfixed> (static)
1852 NOTE: inherited from fpc, see #472304
1853 - mseide-msegui <unfixed> (static)
1854 NOTE: inherited from fpc, see #472304
1855 - easymp3gain <unfixed> (static)
1856 NOTE: inherited from fpc, see #472304
1857 - winff <unfixed> (static)
1858 NOTE: inherited from fpc, see #472304
1859 - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
1860
1861
1862 lxr
1863 - lxr-cvs (embed)
1864
1865 libfile-copy-recursive-perl
1866 - r-base <unfixed> (embed; bug #577427)
1867 - r-base-core-ra <unfixed> (embed; bug #577429)
1868
1869 delimmatch
1870 - r-base <unfixed> (embed; bug #577433)
1871 - r-base-core-ra <unfixed> (embed; bug #577434)
1872
1873 libsmf (ITP: #572558)
1874 - denemo <unfixed> (embed)
1875 NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
1876
1877 libselinux
1878 - dpkg 1.15.6 (static)
1879
1880 xinha (ITP: #479708)
1881 - horde3 <unfixed>
1882 - serendipity <unfixed>
1883 - openacs <unfixed>
1884 - dotlrn <unfixed>
1885
1886 dvipng
1887 - texlive-bin <not-affected> (code present in source but not included in the binary packages)
1888
1889 dvipdfmx
1890 - texlive-bin <unfixed> (embed)
1891 NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
1892
1893 lcdf-typetools
1894 - texlive-bin 2009-1 (embed)
1895
1896 tex4ht
1897 - texlive-bin 2009-1 (embed)
1898
1899 freetype
1900 - texlive-bin 2009-1 (embed)
1901
1902 freetype2
1903 - texlive-bin 2009-1 (embed)
1904
1905 silgraphite
1906 - texlive-bin <unfixed> (embed)
1907
1908 unzip
1909 - texlive-bin 2009-1 (embed)
1910
1911 jbig2dec
1912 - ghostscript 8.71~dfsg2-1 (embed)

  ViewVC Help
Powered by ViewVC 1.1.5