/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 8085 by nion, Tue Feb 5 21:40:32 2008 UTC revision 13474 by gilbert-guest, Mon Dec 7 03:10:28 2009 UTC
# Line 11  Format: Line 11  Format:
11          NOTE: optional comments about the linkage of the embedding srcpkg          NOTE: optional comments about the linkage of the embedding srcpkg
12    
13  status: version number fixing the embedded copy, <unfixed>, <removed>,  status: version number fixing the embedded copy, <unfixed>, <removed>,
14          <itp> or <unknown> if the version number can not be determined          <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17  sort: static (linking statically against a lib)  sort: static (linking statically against a lib)
18        embed (embedding a copy of the library into another source package)        embed (embedding a copy of the library into another source package)
19        fork (the package is not just embedding code but it is a fork and        fork (the package is not just embedding code but it is a fork and
20              thus might share parts of the source code)              thus might share parts of the source code)
21          old-version (the package is an older version of essentially
22                       the same code)
23    
24  The srcpkg might be some string to identify the code if there is no  The srcpkg might be some string to identify the code if there is no
25  specific source package.  specific source package.
# Line 24  Everything up to the next line is ignore Line 28  Everything up to the next line is ignore
28  ---BEGIN  ---BEGIN
29  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
30          NOTE: Fixed packages link to poppler library unless otherwise noted          NOTE: Fixed packages link to poppler library unless otherwise noted
         - gpdf <removed>  
         [sarge] - gpdf <unfixed>  
         NOTE: has been replaced by evince in etch  
31          - pdftohtml <unknown>          - pdftohtml <unknown>
32          [sarge] - pdftohtml <unfixed>          [sarge] - pdftohtml <unfixed>
33          [etch] - pdftohtml <unfixed>          [etch] - pdftohtml <unfixed>
34          NOTE: has been replaced by poppler-utils          NOTE: has been replaced by poppler-utils
35          - kdegraphics <unfixed> (embed; bug #436164)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
36          NOTE: the kpdf replacement in KDE 4 is using poppler          - texlive-base 3.0-12 (embed)
         - tetex-bin 3.0-12 (embed)  
37          - texlive-bin 2007-1 (embed)          - texlive-bin 2007-1 (embed)
38          NOTE: links to poppler          NOTE: links to poppler
39          - koffice <unfixed> (embed; bug #436163)          - koffice <unfixed> (embed; bug #436163)
40          - libextractor 0.5.12-1 (embed)          - libextractor 0.5.12-1 (embed)
41          NOTE: libextractor is using its own pdf decoder now          NOTE: libextractor is using its own pdf decoder now
         - libextractor 0.5.12-1 (embed)  
         - pdfkit.framework 0.8-4 (embed)  
42          - ipe <unfixed> (embed)          - ipe <unfixed> (embed)
43          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
44          - ruby-gnome2 <unknown> (embed)          - ruby-gnome2 <unknown> (embed)
45          NOTE: copy only present in source but links to poppler          NOTE: copy only present in source but links to poppler
46            - pdfedit <unfixed> (embed; bug #510794)
47            - swftools <unfixed> (embed; bug #551293)
48            - poppler <unfixable> (fork)
49    
50  ppmd  ppmd
51          - libcomplearn-mod-ppmd <unfixed> (embed; bug #458152)          - libcomplearn-mod-ppmd <unfixed> (fork)
52            NOTE: discussion in #458152
53    
54    libevent
55            - transmission 1.71-1 (embed; bug #529372)
56    
57    lrmi
58            - read-edid 2.0.0-1 (embed; bug #495131)
59            - s3switch <unfixed> (embed)
60            - xresprobe <unfixed> (embed)
61            - zhcon <unfixed> (embed)
62    
63    peercast
64            - gnome-peercast <removed> (embed)
65            [etch] - gnome-peercast <unfixed> (embed)
66    
67  silc-toolkit  silc-toolkit
68          - silc-client 1.1~beta6-1 (embed)          - silc-client 1.1~beta6-1 (embed)
69    
70    icclib
71            - ghostscript <unfixed> (embed)
72            - argyll <unfixed> (embed)
73    
74  dietlibc  dietlibc
75          - ccontrol 0.9.1+20071204-1 (static)          - ccontrol 0.9.1+20071204-1 (static)
76    
77    libmikmod
78            - sdl-mixer1.2 <unfixed> (embed)
79            TODO: report bug
80    
81  libiax  libiax
82          - iaxmodem <unfixed> (embed)          - iaxmodem <unfixable> (embed; bug #548885)
83    
84    spandsp
85            - iaxmodem <unfixable> (embed; bug #548885)
86    
87  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
88          - dpkg <unfixed> (embed)          - dpkg <unfixed> (static)
89          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
90          - rsync <unfixed> (embed)          - rsync <unfixed> (embed)
91          NOTE: somehow derived code base          NOTE: somehow derived code base
# Line 70  zlib (lots of apps embed a copy, but lin Line 96  zlib (lots of apps embed a copy, but lin
96          - mrtg 2.12.2-1 (embed)          - mrtg 2.12.2-1 (embed)
97          - rpm <unknown> (embed)          - rpm <unknown> (embed)
98          NOTE: pinged anibal since when rpm was fixed          NOTE: pinged anibal since when rpm was fixed
99            - tuxcmd-modules <unfixed> (embed)
100            - zsync <unfixed>
101            - tra <unfixed>
102            - sash <unfixed>
103            - nsis <unfixed>
104            - mseide-msegui <unfixed>
105            NOTE: mseide
106            - mirrordir <unfixed>
107            - poco <unfixed>
108            - klibc <unfixed>
109            - ghostscript <unfixed>
110            - freeimage <unfixed>
111            - clamav <unfixed> (fork)
112            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
113            - tuxonice-userui <unfixed>
114            - plt-scheme <unfixed>
115            - perl <unfixed>
116            - paraview <unfixed>
117            - gcvs <unfixed>
118            - dump <unfixed>
119            - aide <unfixed> (static)
120            - dar <unfixed> (static)
121            - avfs <unfixed>
122            - fpc <unfixed>
123            - winff <unfixed>
124            NOTE: inherited from fpc, see #472304
125            - lazarus <unfixed>
126            NOTE: inherited from fpc, see #472304
127            - erlang <unfixed> (embed)
128            - gamera 3.2.3-1 (embed)
129            - python2.4 <unfixed> (embed; bug #553403)
130            - python2.5 <unfixed> (embed; bug #553403)
131    
132    dulwich
133            - hg-git 0.1.0-1 (embed; bug #541996)
134    
135    libvigraimpex
136            - hugin <unfixed> (embed; bug #542259)
137            - enblend-enfuse <unfixed> (embed; bug #542258)
138            - gamera 3.2.3-1 (embed)
139    
140  libbz2  libbz2
141          - dpkg <unfixed> (static)          - dpkg <unfixed> (static)
142    
143  ekg  libgadu
144          - centericq <unfixed> (embed)          - centerim <unfixed> (embed; bug #559783)
145          - gaim <unfixed> (embed)          - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
146          - pigdin <unfixed> (embed)(links dynamically against libgadu)          - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
147          - kopete 4:3.3.2-5 (embed)          - kdenetwork 4:3.3.2-5 (embed)
148          - kadu <unfixed> (embed)          NOTE: from kdenetwork: kopete
149          - gadu <unfixed> (embed)          - ekg 1:1.8~rc0-1 (embed)
150          NOTE: g/kadu not packaged in Debian yet          - kadu 0.6.0.2-3 (embed; bug #504430)
151            - gadu <itp> (embed)
152    
153  xmlrpc (which package is the "origin" of this code?)  xmlrpc (which package is the "origin" of this code?)
154          - drupal <unfixed> (embed)          - drupal <unfixed> (embed)
155          - phpgroupware <unfixed> (embed)          - phpgroupware <unfixed> (embed)
156          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
157          - phpwiki (embed)          - phpwiki <unfixed> (embed)
158          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
159          TODO: check, php-pear, IIRC this was reorganized some weeks ago?          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
160    
# Line 95  shtool (affects build-time only) Line 162  shtool (affects build-time only)
162          - mysql-ocaml <unfixed> (embed)          - mysql-ocaml <unfixed> (embed)
163          - php4 <unfixed> (embed)          - php4 <unfixed> (embed)
164    
165  mozilla source code  iceape
166          - mozilla-firefox <unfixed> (embed)          - iceweasel <unfixed> (fork)
167          - mozilla-thunderbird          - icedove <unfixed> (fork)
168          - firefox <removed>          - xulrunner <unfixed> (fork)
169          [etch] - firefox <unfixed> (embed)          - kompozer <unfixed> (embed; bug #532168)
170          - thunderbird <removed>          - galeon <unfixed> (fork)
171          [etch] - thunderbird <unfixed> (embed)          - epiphany-browser <unfixed> (fork)
172          - iceweasel <unfixed> (embed)          - conkeror <unfixed> (fork)
173          - iceape <unfixed> (embed)          - kazehakase <unfixed> (fork)
         - icedove <unfixed> (embed)  
         - xulrunner <unfixed> (embed)  
         - nvu <removed> (embed)  
174    
175  xli  xli
176          - xloadimage <unfixed> (embed)          - xloadimage <unfixed> (embed)
177    
178  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
179          - openmotif <unfixed> (embed)          - openmotif <unfixed> (embed)
180          - xfree86/xorg <unfixed> (embed)          - libxpm <unfixed> (embed)
         NOTE: in libxpm  
181    
182  kerberized apps with BSD origin  kerberized apps with BSD origin
183          - krb4 <unfixed> (embed)          - krb4 <removed> (embed)
184          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
185          - heimdal <unfixed> (embed)          - heimdal <unfixed> (embed)
186    
187  grip (which pkg is the origin?)  grip (which pkg is the origin?)
188          - libcdaudio          - libcdaudio <unfixed>
189          - grip          - grip <unfixed>
190          - gnome-vfs          - gnome-vfs <unfixed>
191          TODO: check vfs2 as well          TODO: check vfs2 as well
192    
193  fudforum  fudforum
194          - phpgroupware-fudforum <unfixed> (embed)          [etch] - phpgroupware <unfixed> (embed)
195          - egroupware-fudforum <removed>          NOTE: phpgroupware-fudforum
196          [sarge] - egroupware-fudforum <unfixed> (embed)          [sarge] - egroupware-fudforum <removed> (embed)
197    
198    libbsd
199            - rdate 1:1.2-3 (embed)
200            - atheme-services <unfixed>
201            - libbsd-arc4random-perl <unfixed>
202            - isakmpd <unfixed>
203            - bsdgames <unfixed> (embed)
204            - bsd-mailx <unfixed> (embed)
205            - netcat-openbsd <unfixed> (embed; bug #550611)
206            - openssh <unfixed> (embed)
207            - unworkable <unfixed> (embed)
208    
209  cvs  cvs
210          - gcvs <unfixed> (embed)          - gcvs <unfixed> (embed)
211          NOTE: see cvsunix/src in tarball          NOTE: see cvsunix/src in tarball
212    
213  pcre  pcre3
         - python* <unfixed> (embed)  
214          - php4 <unknown> (embed)          - php4 <unknown> (embed)
215          - analog 2:5.23-0woody1 (embed)          - analog 2:5.23-0woody1 (embed)
216          - libgoffice-1 <unfixed> (embed)          - goffice <unfixed> (embed)
217            NOTE: libgoffice-*
218          - vfu 4.06-4.1 (embed; bug #450754)          - vfu 4.06-4.1 (embed; bug #450754)
219          - tf5 5.0beta7-1 (embed)          - tf5 5.0beta7-1 (embed)
220          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
221          NOTE: this only affects versions >= 0.37          NOTE: this only affects versions >= 0.37
222          - glib <unfixed> (embed)          - glib2.0 2.15.2-1 (embed)
         NOTE: 2.14 series for gregex support, only for udeb, regular packag links dynamic  
223          - apache2 2.0.53-4 (embed)          - apache2 2.0.53-4 (embed)
224          - exim4 4.10-0.srh20.12 (embed)          - exim4 4.10-0.srh20.12 (embed)
225          - yacas <unfixed> (embed)          - yacas <unfixed> (embed)
226          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
227          - gtamsanalyzer.app 0.42-5 (embed)          - gtamsanalyzer.app 0.42-5 (embed)
228            - tin 980117-1 (embed)
229            - kazehakase 0.5.2-1
230            - webkit 1.0.1-1 (embed)
231            - qt4-x11 <unfixed> (embed)
232            NOTE: embedded via webkit copy
233            - erlang <unfixed> (embed)
234    
235  tiff  tiff
236          - wxpythongtk <unfixed> (embed)          - wxwindows2.4 2.2.1 (embed)
237          TODO: check, which debian pkg this is in          - gamera 3.2.3-1 (embed)
238    
239  uudeview  uudeview
240          - libconvert-uulib-perl <unfixed> (embed)          - libconvert-uulib-perl <unfixed> (embed)
241            - pan <unfixed> (embed)
242    
243  sqlite (not affected by security vulnerabilities so far)  sqlite (not affected by security vulnerabilities so far)
244          - amarok <unfixed> (embed)          - amarok <unfixed> (embed)
245          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
246          - iceweasel <unfixed> (embed)          - iceweasel <unfixed> (embed)
247            - heimdal <unfixed> (embed; bug #559616)
248    
249  util-linux/mount  util-linux/mount
250          - loop-aes-utils <unfixed> (embed)          - loop-aes-utils <unfixed> (embed)
251          NOTE: contains code from util-linux' mount in the mount-aes-udeb          NOTE: contains code from util-linux' mount in the mount-aes-udeb
252    
 webmin  
         - usermin <unknown> (embed)  
         [sarge] - usermin <unfixed> (embed)  
   
253  sylpheed  sylpheed
254          - sylpheed-claws <unfixed> (fork)          - sylpheed-claws <unfixed> (fork)
255    
# Line 187  phpldapadmin Line 264  phpldapadmin
264  chmlib  chmlib
265          - kchmviewer <unknown> (embed)          - kchmviewer <unknown> (embed)
266    
267  libavcodec/libavformat (source: ffmpeg)  ffmpeg (libavcodec/libavformat)
268          - mplayer <unfixed> (embed; bug #395252)          - mplayer 1.0~rc2-14 (embed; bug #395252)
269          - xvidcap <unfixed> (embed)          - kino 1.0.0-1
270          - kino <unfixed> (static)          - vlc <not-affected> (Links dynamically since initial release)
271          - vlc <unfixed> (static)          - smilutils 0.3.0-10
272          - smilutils <unfixed> (static)          NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
273          - motion <unfixed> (static)          - motion 3.1.19-1
274          - gst-ffmpeg <unfixed> (embed)          - gstreamer0.10-ffmpeg 0.10.3-2
275          - gstreamer0.10-ffmpeg <unfixed> (embed)          - xmovie <removed> (static)
         - xmovie <unfixed>  
276          TODO: gimp-gap (potentially using ffmpeg code as well)          TODO: gimp-gap (potentially using ffmpeg code as well)
277            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
278            - audacity 1.3.7-2 (embed; bug #512278)
279    
280    faad2
281            - mplayer 1.0~rc2-20 (embed)
282            - avifile <unfixed> (embed; bug #538750)
283            - ffmpeg-debian <removed> (old-version)
284    
285  mad MPEG decoding lib  libmad (MPEG decoding lib)
         - mad <unfixed> (embed)  
286          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
287            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
288            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
289    
290  libdts  libdts
291          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 217  libmpeg2 Line 301  libmpeg2
301          - mpeg2dec <unfixed> (embed)          - mpeg2dec <unfixed> (embed)
302          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
303    
304  curl  libntlm
305          - wget <unfixed> (embed)          - wget <unfixed> (fork; bug #550436)
306          NOTE: code for NTLM authentication          - curl <unfixed> (fork; bug #550437)
307            - cntlm <unfixed> (fork; bug #550438)
308    
309  uw-imap  uw-imap
310          - pine <unfixed> (embed)          - pine <unfixed> (embed)
# Line 228  uw-imap Line 313  uw-imap
313  imagemagick  imagemagick
314          - graphicsmagick <unfixed> (fork)          - graphicsmagick <unfixed> (fork)
315    
316    python-urlgrabber
317            - mercurial <unfixed> (embed; bug #531062)
318            - w3af <unfixed> (embed; bug #555372)
319            [experimental] - harvestman <unfixed> (embed; bug #555373)
320    
321    beautifulsoup
322            - python-mechanize <unfixed> (embed; bug #555349)
323            - zope2.11 <unfixed> (embed; bug #555350)
324            - twill <unknown> (embed)
325    
326  halibut  halibut
327          - nsis <unfixed> (embed)          - nsis <unfixed> (fork)
328    
329  libghttp  libghttp
330          - hotway <unfixed> (embed)          - hotway <unfixed> (embed)
331    
332  libsndfile  libsndfile
333          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
334    
335  glibmm2.4  glibmm2.4
336          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
337    
338  libgnomecanvasmm2.6  libgnomecanvasmm2.6
339          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
340    
341  libsigc++-2.0  libsigc++-2.0
342          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
343    
344  soundtouch  soundtouch
345          - ardour <unfixed> (embed)          - ardour 1:2.7.1-1 (embed)
346    
347  libmms  libmms
348          - xine-lib <unfixed> (embed)          - xine-lib <unfixed> (embed)
# Line 255  libmms Line 350  libmms
350    
351  fckeditor  fckeditor
352          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)          - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
353          - moin <unfixed> (embed; bug #452599)          - moin 1.8.2-2 (embed; bug #452599)
354          - karrigell <unfixed> (embed; bug #452598)          - karrigell <removed> (embed; bug #452598)
355          - gforge-plugins-extra 4.6.99+svn6225-1 (embed)          - gforge 4.6.99+svn6225-1 (embed)
356            - request-tracker3.8 <unfixed> (embed)
357    
358  ipatlas (not packaged in Debian)  ipatlas (not packaged in Debian)
359          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
360    
361  libphp-phpmailer  libphp-phpmailer
362          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
363            - mahara <unfixed> (embed)
364            - symfony <unfixed> (embed)
365            [etch] - phpgroupware <unfixed> (embed)
366            NOTE: phpgroupware-felamimail is only in etch
367            - egroupware <unfixed> (embed; bug #504283)
368            - glpi <unfixed>
369    
370  htmlArea (not packaged in Debian)  htmlArea (not packaged in Debian)
371          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
372    
373  bennu (not packaged in Debian)  giflib
374          - moodle <unfixed> (embed)          - wine <unfixed> (embed; bug #466181)
375    
376  smarty:  bennu (not packaged in Debian, http://bennu.sourceforge.net)
377          - moodle <unfixed> (embed)          - moodle <unfixed> (embed)
378    
379    smarty
380            - moodle 1.8.2-2 (embed; bug #471158)
381            - gallery2 2.2.5-2 (embed; bug #471160)
382            - mahara 0.9.2-2 (embed; bug #471201)
383            - gosa 2.4beta1-1 (embed; bug #471200)
384    
385  TinyMCE  TinyMCE
386          - wordpress <unfixed> (embed)          - wordpress 2.5.1-3 (embed; bug #478257)
387          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
388          - knowledgeroot <unfixed> (embed)          - knowledgeroot <unfixed> (embed)
389          - joomla <itp> (bug #326398)          - joomla <itp> (bug #326398)
390    
391  scintilla  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
392          - scite <unfixed> (embed)          - scite <unfixed> (embed)
393          - qscintilla <unfixed> (embed)          - qscintilla <unfixed> (embed)
394          - qscintilla2 <unfixed> (embed)          - qscintilla2 <unfixed> (embed)
395          - geany <unfixed> (embed)          - geany <unfixed> (fork)
396            - anjuta <unfixed> (embed)
397    
398  libphp-adodb  libphp-adodb
399          - moodle <unfixed> (embed)          - moodle <unfixed> (embed; bug #507185)
400          NOTE: also AdoDB-XML Schema          NOTE: also AdoDB-XML Schema
401          - gallery2 <unfixed> (embed)          - gallery2 <unfixed> (embed)
402          - phppgadmin <unfixed> (embed)          - phppgadmin <unfixed> (embed)
403          - egroupware <unfixed> (embed)          - egroupware <unfixed> (embed)
404          - phpwiki <unfixed> (embed)          - phpwiki <unfixed> (embed)
405            - torrentflux 2.0beta1-2 (embed)
406          - ipplan <unfixed> (embed)          - ipplan <unfixed> (embed)
407          - typo3 <unfixed> (embed)          - typo3-src <unfixed> (embed)
         - moodle <unfixed> (embed)  
408          - cacti <unknown> (embed)          - cacti <unknown> (embed)
409          [sarge] - cacti <unfixed> (embed)          [sarge] - cacti <unfixed> (embed)
410          NOTE: dependency exists, but internal version is used          NOTE: dependency exists, but internal version is used
411            - gforge 4.7~rc2-6 (embed)
412            - mahara <unfixed> (embed)
413    
414  gzip  gzip
415          - linux-kernel <unfixed> (embed)          - linux-kernel <unfixed> (embed)
# Line 308  gzip Line 419  gzip
419          - busybox <unfixed> (embed)          - busybox <unfixed> (embed)
420    
421  neon  neon
422          - cadaver <unfixed> (embed; bug #188381)          - cadaver 0.22.3+debian-1 (embed; bug #188381)
423          - gnome-vfs2 <unfixed> (embed; bug #395874)          - gnome-vfs2 <unfixed> (embed; bug #395874)
424          - litmus <unfixed> (embed; #395875)          [etch] - litmus <unfixed> (embed; #395875)
425            - litmus <removed> (embed; #395875)
426          [sarge] - screem <unfixed> (embed)          [sarge] - screem <unfixed> (embed)
427          - sitecopy <unfixed> (embed; bug #395876)          - sitecopy 1:0.16.3-5 (embed; bug #395876)
428          [etch] - tla <unfixed> (embed; bug #395877)          [etch] - tla <unfixed> (embed; bug #395877)
429          [sarge] - tla <unfixed> (embed; bug #395877)          [sarge] - tla <unfixed> (embed; bug #395877)
430    
# Line 325  libvncserver Line 437  libvncserver
437  putty  putty
438          - filezilla <unfixed> (embed)          - filezilla <unfixed> (embed)
439    
440  tinyxml (not packaged in Debian)  tinyxml (not packaged in Debian; itp bug #531968)
441          - filezilla <unfixed>          - filezilla <unfixed>
442            - crystalspace <unfixed> (embed)
443            - libwfut <unfixed> (embed)
444            - rarian <unfixed> (embed)
445            - bulletml <unfixed> (embed)
446            - pokerth <unfixed> (embed)
447            - qutecom <unfixed> (embed)
448            - sofa-framework <unfixed> (embed)
449            - yate <unfixed> (embed)
450            - antigrav <unfixed> (embed)
451            - balder2d <unfixed> (embed)
452            - cal3d <unfixed> (embed)
453            - criticalmass <unfixed> (embed)
454            - ember <unfixed> (embed)
455            - epiphany <unfixed> (embed)
456            - gambit <unfixed> (embed)
457            - noiz2sa <unfixed> (embed)
458            - ogre <unfixed> (embed)
459            - opencity <unfixed> (embed)
460            - openmovieeditor <unfixed> (embed)
461            - pouetchess <unfixed> (embed)
462            - tecnoballz <unfixed> (embed)
463            - trigger-rally <unfixed> (embed)
464            - xmoto <unfixed> (embed)
465            - mapnik <unknown> (embed)
466            NOTE: uses a different XML parser by default
467            - rrootage 0.23a-6 <embed>
468            NOTE: links to libbulltetml
469            - boson <unknown> (embed)
470            NOTE: the embedded code is unused
471    
472  gv  gv
473          - evince <unfixed> (embed)          - evince <unfixed> (embed)
474          NOTE: ps/ tree from gv 3.5.8          NOTE: ps/ tree from gv 3.5.8
475          - evince-gtk <unfixed> (embed)          NOTE: evince-gtk is affected (a component of evince source package)
         NOTE: not packaged in Debian  
476    
477  libXbae  libXbae
478          [etch] - libpawlib2-lesstif <unfixed> (embed)          - paw <removed> (embed)
479          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
480    
481    libgtkhtml
482            - claws-mail-extra-plugins <unfixed> (fork)
483    
484  libXaw  libXaw
485          [etch] - libpawlib2-lesstif          - paw <removed> (embed)
486          NOTE: from Cernlib          [etch] - paw <unfixed> (embed)
487          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
488    
489  libgd2  libgd2
490          - graphviz <unfixed> (embed)          - graphviz <unfixed> (embed)
491          NOTE: lib/gd seems to be 2.0.33          NOTE: lib/gd seems to be 2.0.33
492            - wml <unfixed> (embed)
493            - libwmf <unfixed> (embed)
494            NOTE: derived from gd 1.6.3
495    
496  rar  rar
497          - unrar-nonfree <unfixed> (embed)          - unrar-nonfree <unfixed> (embed)
# Line 359  mplayer (DirectMedia Object loader) Line 505  mplayer (DirectMedia Object loader)
505          NOTE: src/libw32dll/          NOTE: src/libw32dll/
506          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
507          NOTE: modules/codec/dmo/          NOTE: modules/codec/dmo/
508            - mplayer 1.0~rc2-20 (embed)
509    
510  libwpd (WordPerfect converter)  libwpd (WordPerfect converter)
511          - openoffice.org <unfixed> (embed)          - openoffice.org <unfixed> (embed)
# Line 367  fsplib (http://sourceforge.net/projects/ Line 514  fsplib (http://sourceforge.net/projects/
514          - gftp <unfixed> (embed)          - gftp <unfixed> (embed)
515          NOTE: lib/fsplib version 0.3          NOTE: lib/fsplib version 0.3
516    
517    sprng
518            - tree-puzzle <unfixed> (embed)
519    
520  librpcsecgss  librpcsecgss
521          - krb5 <unfixed> (embed)          - krb5 <unfixed> (embed)
522    
523  jasper  jasper
524          - ghostscript <unfixed> (embed)          - ghostscript 8.70~dfsg-2+b1 (embed)
525          - gs-gpl <unfixed> (embed)          - ghostscript <unfixed> (static)
526    
527    libiris
528            - psi <unfixed> (embed)
529            - kdenetwork <unfixed> (embed)
530            NOTE: kopete embeds libiris but links dynamically to libidn
531            - kdegames <unfixed> (embed)
532            NOTE: ksirk/kde4
533    
534  libidn  libidn
535          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
536            - psi <unfixed> (embed)
537            NOTE: psi embeds libiris which embeds libidn
538            - kdegames <unfixed> (embed)
539            NOTE: kdegames/kde4 embeds libiris which embeds libidn
540    
541  liblua  liblua
542          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
543            - nmap 5.00-1 (embed; bug #527997)
544            [lenny] - nmap <unfixed> (embed; bug #527997)
545            - ocropus <unfixed> (embed)
546    
547  libbotan  libbotan
548          - montone <unfixed> (embed)          - monotone 0.43-1 (embed)
549    
550  NetXX  NetXX
551          - monotone <unfixed> (embed)          - monotone 0.43-1 (embed)
552    
553  libgc  libgc
554          - mono <unfixed> (embed)          - mono <unfixed> (embed)
555    
556  lzma  lzma
557          - p7zip <unfixed> (embed)          - p7zip <unfixed> (embed)
558            - xz-utils <unfixed> (fork)
559    
560  lzo  lzo
561          - grub2 <unfixed> (embed)          - grub2 <unfixed> (embed)
# Line 413  guichan Line 578  guichan
578  tolua  tolua
579          - boswars <unfixed> (embed)          - boswars <unfixed> (embed)
580          NOTE: maintainer notified us, working on it          NOTE: maintainer notified us, working on it
581            - ocropus <unfixed> (embed)
582            - freeciv <unfixed> (embed)
583    
584  asio-dev  asio-dev
585          - luxrender <unfixed> (embed)          - luxrender <removed> (embed)
         NOTE: maintainer notified us, working on it  
         NOTE: may be merged with boost "soon"  
586    
587  xine-lib  xine-lib
588          - vlc <unfixed> (embed)          - vlc <unfixed> (embed)
# Line 428  netpbm Line 593  netpbm
593          - tcl8.4 <unfixed> (embed)          - tcl8.4 <unfixed> (embed)
594          - tcl8.5 <unfixed> (embed)          - tcl8.5 <unfixed> (embed)
595          NOTE: generic/tkImgGIF.c          NOTE: generic/tkImgGIF.c
596    
597    tk8.5
598            - tk8.0 <removed> (old-version)
599            - tk8.3 <unfixed> (old-version)
600            - tk8.4 <unfixed> (old-version)
601            - perl-tk <unfixable> (fork)
602    
603    samba
604            - mc 2:4.6.2~git20080311-1 (embed)
605            NOTE: maintainer is aware of this, currently searching a solution
606    
607    plib1.8.4c2
608            - boson <unfixed> (fork)
609            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
610    
611    fribidi
612            - quesoglc <unfixed> (embed)
613            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
614    
615    glew
616            - quesoglc <unfixed> (embed; bug #489341)
617            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
618            - trigger <unfixed> (embed)
619            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
620            - trigger-rally <unfixed> (embed)
621            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
622    
623    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
624            - transcend <unfixed> (embed)
625            - cultivation <unfixed> (embed)
626            - passage <unfixed> (embed)
627            - gravitation <unfixed> (embed)
628    
629    tar
630            - libarchive <unfixed> (embed)
631            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
632    
633    cpio
634            - libarchive <unfixed> (embed)
635            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
636    
637    webkit
638            - qt4-x11 <unfixed> (embed; bug #479851)
639            - kdelibs <unfixed> (old-version)
640            - kde4libs <unfixed> (fork)
641    
642    ftgl
643            - blender 2.46+dfsg-1 (embed)
644    
645    wv
646            - abiword <unfixed>
647    
648    qemu
649            - kvm <unfixed> (embed; bug #543159)
650            - xen-3 <unfixed> (embed)
651            - xen-unstable <unfixed> (embed)
652    
653    vgabios
654            - kvm <unfixed> (embed; bug #489442)
655    
656    bochs
657            - kvm <unfixed> (embed; bug #489442)
658    
659    speex
660            - vorbis-tools <unfixed> (embed)
661            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
662            - gst-plugins-good0.10 <unfixed> (embed)
663            - xine-lib <unfixed> (embed)
664            - libfishsound <unfixed> (embed)
665            - libannodex <unfixed> (embed)
666            - vlc <unfixed> (embed)
667            - xmms-speex <unfixed> (embed)
668            - libsdl-sound1.2 <unfixed> (embed)
669            - sweep <unfixed> (embed)
670    
671    libreadline
672            - magic <itp> (old-version)
673    
674    opcode
675            - ode <unfixed> (embed)
676            NOTE: opcode is not a package in debian, it is just embedded
677            NOTE: http://www.codercorner.com/Opcode.htm
678    
679    gimpact
680            - ode <unfixed> (embed)
681            NOTE: gimpact is not a package in debian, it is just embedded
682            NOTE: http://gimpact.sf.net
683    
684    mochikit
685            - mahara <unfixed> (embed)
686            NOTE: they require extra patches, still unmerged upstream
687            - ntop <unfixed> (embed)
688            - coherence 0.6.2-1 (embed)
689            - paste <unfixed> (embed)
690            - turbogears <unfixed> (embed)
691            - plone3 <unfixed> (embed)
692            - xulrunner <unfixed> (embed)
693            - libjifty-plugin-chart-perl <unfixed> (embed)
694            - sabnzbdplus <unfixed> (embed)
695            - tgmochikit <unfixed> (embed)
696    
697    prototypejs
698            - netbeans-ide 6.0.1+dfsg-2 (embed)
699            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
700            - webcit <unfixed> (embed; bug #555219)
701            - asterisk 1:1.6.2.0~rc3-1 (embed)
702            - libjson-ruby 1.1.4-1 (embed; bug #555224)
703            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
704            - horde3 <unfixed> (embed)
705            - knowledgeroot <unfixed> (embed; bug #555230)
706            - mediatomb <unfixed> (embed; bug #555233)
707            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
708            - ebug-http <unfixed> (embed; bug #555236)
709            - phpgedview <removed> (embed)
710            - poker-network <unfixed> (embed; bug #555238)
711            - rails 2.1.0-6 (embed)
712            - wordpress 2.5.0-2 (embed; bug #555243)
713            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
714            TODO: search through all of the other zope packages
715            - ampache 3.4.1-2 (embed)
716            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
717            - hobix 0.5~svn20070319-4 (embed; bug #555247)
718            - zabbix 1.6.6-4 (embed; bug #555250)
719            - chora2 <unfixed> (embed; bug #555253)
720            - gollem <unfixed> (embed; bug # 555254)
721            - jscropperui 1.2.1-1 (embed; bug #555257)
722            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
723            - ingo1 <unfixed> (embed; bug #555261)
724            - kronolith2 <unfixed> (embed; bug #555262)
725            - activeldap <unfixed> (embed)
726            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
727            - mantis <unfixed> (embed; bug #555265)
728            - otrs2 2.3.4-6 (embed; bug #555267)
729            - webcalendar <unfixed> (embed; bug #555269)
730            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
731            - jifty 0.90519-1 (embed; bug #555271)
732            - jquery <unfixed> (embed; bug #555272)
733            - passenger 2.2.5debian1-1 (embed; bug #555273)
734            - plone3 <unfixed> (embed; bug #555275)
735            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
736            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
737            - xulrunner <unfixed> (embed)
738            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
739    
740    gdb
741            - insight <unfixed> (embed)
742    
743    e2fsprogs
744            - ldiskfsprogs <unfixable> (fork)
745    
746    quazip (not packaged in Debian)
747            - qcake <unfixed> (embed)
748            NOTE: starting with upstream version 0.6.4
749    
750    exo
751            - pcmanfm <unfixed> (embed; bug #499677)
752            NOTE: slightly modified source code
753    
754    java
755            - openjdk-6 <unfixed>
756            - sun-java5 <unfixed>
757            - sun-java6 <unfixed>
758    
759    libphp-snoopy
760            - ampache 3.4.1-2 (embed; bug #504169)
761            - gforge 4.6.99+svn6094-2 (embed)
762            - mahara 1.0.5-2 (embed; bug #504170)
763            - pixelpost 1.7.1-5 (embed; bug #504171)
764            - mediamate 0.9.3.6-5 (embed; bug #504172)
765            - opendb <removed> (embed; bug #504173)
766            [etch] - opendb <unfixed> (embed; bug #504173)
767            - wordpress 2.5.1-9 (embed; bug #443948)
768            - moodle <unfixed> (embed; bug #507185)
769            [etch] - phpgroupware <unfixed> (embed)
770            NOTE: phpgroupware-felamimail
771            - magpierss 0.72-3 (embed; bug #431089)
772    
773    jquery
774            - zekr <unfixed> (embed)
775            - wordpress <unknown> (embed)
776            - yocto-reader <unfixed> (embed)
777            - textpattern <unfixed> (embed)
778            - genshi 0.5.1-1 (embed)
779            NOTE: compressed file under examples/ dir
780            - prewikka <unfixed> (embed)
781            - libramaze-ruby <unfixed> (embed)
782            - drupal5 <unfixed> (embed)
783            - b2evolution <unfixed> (embed)
784            - wesnoth <unfixed> (embed)
785    
786    tablesorter (jquery plugin, not packaged yet)
787            - wesnoth <unfixed> (embed)
788    
789    kses
790            - wordpress <unfixed> (embed; bug #504242)
791            NOTE: their copy has all methods renamed to wp_<foo>
792            NOTE: kses isn't in Debian, RFP: #504240
793            - moodle <unfixed> (embed; bug #507185)
794            - egroupware <unfixed> (embed)
795    
796    magpierss
797            - wordpress <unfixed> (embed; bug #504242)
798            - moodle <unfixed>
799    
800    php-gettext
801            - wordpress 2.8.4-1 (embed; bug #504242)
802    
803    libphp-ixr (name may change, it is the Incutio XML-RPC)
804            - wordpress <unfixed> (embed; bug #504242)
805            NOTE: libphp-ixr isn't in Debian, RFP: #504236
806            - dokuwiki <unfixed> (embed)
807            - textpattern <unfixed> (embed)
808    
809    libphp-cas
810            - glpi <unfixed> (embed)
811            - moodle <unfixed> (embed; bug #505984)
812    
813    scriptaculous (prototype.js is among the embeds in the following)
814            - glpi <unfixed> (embed)
815            - libaws <unfixed> (embed; bug #555222)
816            - op-panel <unfixed> (embed)
817            - symfony <unfixed> (embed)
818            NOTE: maintainer says there are extra incompatible changes required
819            - pixelpost 1.7.1-6 (embed)
820            - webhelpers <unfixed> (embed)
821            - qwik <unfixed> (embed; bug #555241)
822            - smokeping <unfixed> (embed)
823            - turba2 <unfixed> (embed)
824            - typo3-src 4.2.3-1 (embed)
825            - request-tracker3.6 <unfixed> (embed)
826            - request-tracker3.8 <unfixed> (embed)
827            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
828            - wordpress 2.5.0-2 (embed)
829            - libhtml-prototype-perl 1.48-3 (embed)
830    
831    libmarkdown-php
832            - moodle <unfixed> (embed; bug #507185)
833            - pixelpost 1.7.1-6 (embed)
834    
835    php-openid
836            - wordpress-openid <itp> (embed)
837    
838    geshi
839            - dokuwiki 0.0.20080505-3.1 (embed)
840            - pgfouine 1.0-1.1 (embed)
841            - websvn 2.1.0-1 (embed)
842    
843    webcalendar
844            - gforge 4.7~rc2-6 (embed; bug #504758)
845    
846    libical
847            - kdepim <unfixed> (fork)
848            - kdepimlibs <unfixed> (fork)
849            NOTE: fixed in KDE4 post 4.1.x series
850            - claws-mail-extra-plugins <unfixed> (fork)
851    
852    libltdl3
853            - kdelibs <unfixed> (embed)
854            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
855            - synfig <unfixed> (embed)
856    
857    harfbuzz
858            - qt4-x11 <unfixed> (embed)
859    
860    libzip
861            - php5 <unfixed> (fork)
862            - odt2txt <unfixed> (embed; bug #523808)
863    
864    json.php (not packaged; should be replaced with php's built-in functions)
865            - moodle <unfixed>
866            - yui <unfixed>
867            - gallery2 <unfixed>
868            - dokuwiki <unfixed>
869            - typo3-src <unfixed>
870    
871    php-fpdf
872            - tcpdf <itp> (fork)
873            - moodle <unfixed>
874            - phpwiki <unfixed>
875            - egroupware <unfixed>
876            - ldap-account-manager <unfixed> (fork)
877    
878    tcpdf (itp: #495985)
879            - moodle <unfixed>
880            - phpmyadmin <unfixed>
881    
882    typo3
883            - moodle <unfixed>
884    
885    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
886            - moodle <unfixed>
887            - gosa <unfixed>
888    
889    php-ole (itp: #487558)
890            - moodle <unfixed>
891    
892    pieforms (http://www.catalyst.net.nz)
893            - mahara <unfixed>
894    
895    savant2 (http://phpsavant.com)
896            - egroupware <unfixed>
897    
898    rssparser (http://nwow.org)
899            - egroupware <unfixed>
900            - phpgroupware <unfixed>
901    
902    lcms
903            - openjdk-6 <unfixed> (fork)
904    
905    libphp-phplayersmenu
906            - diogenes <unfixed>
907            - phpldapadmin <unfixed>
908    
909    libphp-pclzip
910            - docvert <unfixed>
911            - moodle <unfixed>
912            - egroupware <unfixed>
913    
914    libphp-simplepie
915            - dokuwiki <unfixed>
916    
917    libphp-jpgraph
918            - egroupware <unfixed>
919    
920    php-simpletest
921            - moodle <unfixed>
922    
923    libpng
924            - iceweasel <not-affected> (uses xulrunner)
925            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
926            - iceape 1.0.13~pre080614i-0etch1 (embed)
927            - xulrunner 1.9.0.13-1 (embed)
928            [lenny] - xulrunner 1.9.0.11-0lenny1
929            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
930            - gamera 3.2.3-1 (embed)
931    
932    irssi
933            - silc-client <unfixed> (embed)
934            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
935    
936    extc
937            - mtasc <unfixed> (embed)
938            - haxe <unfixed> (embed)
939    
940    swflib
941            - mtasc <unfixed> (embed)
942            - haxe <unfixed> (embed)
943    
944    libitext-java
945            - bouncycastle 2.1.4-1 (embed)
946    
947    python-ply
948            - pyke <unfixed> (embed; bug #555363)
949            - pywbem <unfixed> (embed; bug #555364)
950            - sepolgen <unfixed> (embed; bug #555365)
951            - zope-textindexng3 <unknown> (embed)
952            - iceweasel <not-affected> (uses xulrunner)
953            - xulrunner <unknown> (embed)
954            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
955    
956    libdumbnet (libdnet upstream)
957            - nmap <unfixed> (fork)
958    
959    gcc-4.4
960            - gcc-mingw32 <unfixed> (embed)
961    
962    camlimages
963            - advi <unfixed> (static; bug #550441)
964    
965    memcached
966            - memcachedb <unfixed> (embed)
967    
968    yajl
969            - argyll <unfixed> (embed; bug #544223)
970            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
971    
972    nusoap
973            - gforge 4.8.2-1 (embed)
974    
975    libept
976            - adept <unfixed> (embed; bug #540649)
977    
978    libvorbis
979            - iceweasel <not-affected> (uses xulrunner)
980            - xulrunner <unfixed> (embed; bug #540959)
981            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
982            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
983            - iceape <unfixed> (embed)
984            [etch] - iceape <not-affected> (introduced in 2.0)
985            [lenny] - iceape <not-affected> (introduced in 2.0)
986    
987    cairo
988            - iceweasel <not-affected> (uses xulrunner)
989            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
990    
991    liboggz
992            - iceweasel <not-affected> (uses xulrunner)
993            - xulrunner <unfixed> (embed; bug #540959)
994            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
995            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
996            - iceape <unfixed> (embed)
997            [etch] - iceape <not-affected> (introduced in 2.0)
998            [lenny] - iceape <not-affected> (introduced in 2.0)
999    
1000    liboggplay
1001            - iceweasel <not-affected> (uses xulrunner)
1002            - xulrunner <unfixed> (embed; bug #540959)
1003            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1004            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1005            - iceape <unfixed> (embed)
1006            [etch] - iceape <not-affected> (introduced in 2.0)
1007            [lenny] - iceape <not-affected> (introduced in 2.0)
1008    
1009    php-net-dnsbl
1010            - serendipity <unfixed> (embed)
1011    
1012    php-onyx-rss
1013            - serendipity <unfixed> (embed)
1014    
1015    php-text-wiki
1016            - serendipity <unfixed> (embed)
1017    
1018    php-xml-rpc
1019            - serendipity <unfixed> (embed)
1020    
1021    polarssl (does not have a shared library)
1022            - pdkim <itp> (embed; bug #543150)
1023            - xyssl <unfixed> (old-version)
1024    
1025    pidgin
1026            - gaim <removed> (old-version)
1027            - qutecom <unfixed> (embed; bug #559785)
1028    
1029    icu
1030            - webkit 1.0.1-1 (embed; bug #547214)
1031            - texlive-bin <unfixed> (fork)
1032            NOTE: texlive upstream working with icu upstream to merge their changes
1033    
1034    cyrus-imapd-2.2
1035            - kolab-cyrus-imapd <unfixed> (fork)
1036            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1037    
1038    python-cxx-dev
1039            - freecad <unfixed> (embed; bug #547936)
1040    
1041    libzipios++-dev
1042            - freecad <unfixed> (embed; bug #547941)
1043    
1044    linux-2.6
1045            - kvm <unfixed> (embed; bug #549973) [./kernel/*]
1046            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1047            - kernel-source-2.6.8 <removed> (old-version)
1048            - kernel-source-2.4.27 <removed> (old-version)
1049            - kernel-source-2.4.24 <removed> (old-version)
1050            - kernel-source-2.2.25 <removed> (old-version)
1051            - kernel-source-2.2.20 <removed> (old-version)
1052    
1053    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1054            - kvm <unfixed> (embed) [./libfdt/*]
1055    
1056    qweb (not packaged)
1057            - ajaxterm <unfixed>
1058    
1059    opensaml2
1060            - opensaml <removed> (old-version)
1061    
1062    shibboleth-sp2
1063            - shibboleth-sp <removed> (old-version)
1064    
1065    tuxonice-userui
1066            - suspend2-userui <removed> (old-version)
1067    
1068    expat
1069            - w3c-libwww <removed> (embed; bug #551941)
1070            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1071            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1072            - python2.5 <unfixed> (embed; bug #553403) [./Modules/expat/*]
1073            - python2.4 <unfixed> (embed; bug #553403)
1074            - wxwindows2.4 <removed> (embed)
1075            - wxwidgets2.6 <unfixed> (embed)
1076            - wxwidgets2.8 <unfixed> (embed)
1077            - celementtree <unfixed> (embed)
1078            - audacity 1.3.2-1 (embed)
1079            - matanza <unfixed> (embed)
1080            - tdom <unfixed> (embed)
1081            - udunits <unfixed> (embed)
1082            - apr-util 1.2 (embed)
1083            - ayttm <unfixed> (embed)
1084            - cableswig <unfixed> (embed)
1085            - cadaver <unfixed> (embed)
1086            - cmake <unfixed> (embed)
1087            - coin3 <unfixed> (embed)
1088            - gdcm <unfixed> (embed)
1089            - ghostscript <unfixed> (embed)
1090            - grmonitor <unfixed> (embed)
1091            - iceape <unfixed> (embed)
1092            - insighttoolkit <unfixed> (embed)
1093            - libparagui1.1 <unfixed> (embed)
1094            - paraview <unfixed> (embed)
1095            - poco <unfixed> (embed)
1096            - simgear <unfixed> (embed)
1097            - sitecopy <unfixed> (embed)
1098            - smart 1.0-1 (embed)
1099            [etch] - smart <unfixed> (embed)
1100            - swish-e <unfixed> (embed)
1101            - tla <unfixed> (embed)
1102            - vtk <unfixed> (embed)
1103            - wbxml2 <unfixed> (embed)
1104            - xmlrpc-c <unfixed> (embed)
1105            - iceweasel <unfixed> (embed)
1106            - kompozer <unfixed> (embed)
1107            - vxl <unfixed> (embed)
1108            - xulrunner <unfixed> (embed)
1109            - apache2 2.2 (embed)
1110            - texlive-bin <unfixed> (embed) [included twice]
1111            - vnc4 <unfixed> (embed)
1112            - xotcl <unfixed> (embed)
1113    
1114    xerces-c
1115            - xerces-c2 <unfixed> (old-version)
1116            - xerces27 <removed> (old-version)
1117    
1118    md5 (RSA's version; not the gnu version provided by coreutils)
1119            - w3c-libwww <removed> (embed; bug #551942)
1120            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1121    
1122    enet
1123            - sauerbraten <unfixed> (embed; #497194)
1124    
1125    eglibc
1126            - glibc <removed> (old-version)
1127    
1128    galib
1129            - gamera 3.2.3-1 (embed)
1130    
1131    configobj
1132            - bzr <unfixed> (embed; bug #555336)
1133            - elisa <unfixed> (embed; bug #555337)
1134            - gaupol <unfixed> (embed; bug #555338)
1135            - ipython <unfixed> (embed; bug #555339)
1136            - pida <unfixed> (embed; bug #555340)
1137            - psychopy <unfixed> (embed; bug #555341)
1138            - rest2web <unfixed> (embed; bug #555342)
1139            - auth2db <unknown> (embed)
1140            - dynagen <unknown> (embed)
1141            - iceweasel <unknown> (embed)
1142            - sabnzbdplus <unknown> (embed)
1143            - xulrunner <unknown> (embed)
1144            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1145    
1146    python-clientform
1147            - bibus <unfixed> (embed; bug #555332)
1148            - zope2.10 <unfixed> (embed; bug #555333)
1149            - zope2.11 <unfixed> (embed; bug #555334)
1150            - python-mechanize <unknown> (embed)
1151            - twill <unknown> (embed)
1152    
1153    python-mechanize
1154            - zope2.10 <unfixed> (embed; bug #555337)
1155            - zope2.11 <unfixed> (embed; bug #555338)
1156            - twill <unknown> (embed; bug #555339)
1157    
1158    pexpect
1159            - duplicity 0.6.06-1 (embed; bug #555361)
1160            - hplip <unfixed> (embed; bug #555362)
1161            - smart <unfixed> (embed; bug #555363)
1162    
1163    pyparsing
1164            - bauble <unfixed> (embed; bug #555366)
1165            - boa-constructor 0.6.1-8 (embed; bug #555367)
1166            - calibre <unfixed> (embed; bug #555368)
1167            - matplotlib <unfixed> (embed; bug #531024)
1168            - zhpy <unfixed> (embed; bug #555370)
1169            - polybori <unknown> (embed)
1170            - python-whoosh <unknown> (embed)
1171            - twill <unknown> (embed)
1172            - zope-textindexng3 <unknown> (embed)
1173    
1174    python-pysqlite2
1175            - python2.4 <unfixed> (embed; bug #553403)
1176            - python2.5 <unfixed> (embed; bug #553403)
1177    
1178    celementtree
1179            - python2.5 <unfixed> (embed)
1180            - smart 1.0-1 (embed)
1181            [etch] - smart <unfixed> (embed)
1182    
1183    elementtree
1184            - python2.5 <unfixed> (embed)
1185            - bzr <unfixed> (embed; bug #555343)
1186            - gedit 2.28.2-1 (embed; bug #555344)
1187            - smart 1.0-1 (embed)
1188            [etch] - smart <unfixed> (embed)
1189            - solfege <unfixed> (embed; bug #555345)
1190            - w3af <unfixed> (embed; bug #555346)
1191            - python-qt4 <unknown> (embed)
1192            - sphinx <unknown> (embed)
1193            - python-nltk <itp> (embed)
1194    
1195    python2.5
1196            - python2.4 <unfixed> (old-version)
1197            - jython <unfixed> (embed)
1198            NOTE: embeds many stdlib modules
1199            - python-django <unfixed> (embed; bug #555419)
1200            NOTE: embeds stdlib modules: doctest, decimal
1201            - gamera 3.2.3-1 (embed)
1202            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1203            - boa-constructor <unfixed> (embed; bug #555426)
1204            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1205            - nicotine <unfixed> (embed; bug #555427)
1206            NOTE: embeds stdlib modules: ConfigParser
1207            - museek+ <unfixed> (embed; bug #555428)
1208            NOTE: embeds stdlib modules: ConfigParser
1209            - vegastrike-data <unfixed> (embed)
1210            NOTE: embeds many stdlib modules
1211            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1212            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1213            - config-manager <unfixed> (embed; bug #555423)
1214            NOTE: embeds stdlib modules: optparse
1215            - jhbuild 2.28.0-1 (embed; bug #555421)
1216            NOTE: embeds stdlib modules: optparse, subprocess
1217            - smart <unfixed> (embed; bug #555432)
1218            NOTE: embeds stdlib modules: optparse
1219            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1220            NOTE: embeds stdlib modules: doctest
1221            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1222            NOTE: embeds stdlib modules: doctest
1223            - distribute <unfixed> (embed)
1224            NOTE: embeds stdlib modules: doctest
1225            - python-setuptools <unfixed> (embed; bug #555435)
1226            NOTE: embeds stdlib modules: doctest
1227            - zope.testing <unfixed> (embed; bug #555436)
1228            NOTE: embeds stdlib modules: doctest
1229            - translate-toolkit <unfixed> (embed; bug #555422)
1230            NOTE: embeds stdlib modules: textwrap, contextlib
1231            - libtpclient-py <unfixed> (embed; bug #555424)
1232            NOTE: embeds stdlib modules: subprocess
1233            - grass <unfixed> (embed; bug #555425)
1234            NOTE: embeds stdlib modules: subprocess
1235            - coherence <unfixed> (embed; bug #555429)
1236            NOTE: embeds stdlib modules: uuid
1237            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1238            NOTE: embeds stdlib modules: uuid
1239            - setroubleshoot <unfixed> (embed; bug #555431)
1240            NOTE: embeds stdlib modules: uuid
1241            - linkchecker <unfixed> (embed; bug #555414)
1242            NOTE: embeds msgfmt.py script
1243            - imdbpy <unfixed> (embed)
1244            NOTE: embeds msgfmt.py script
1245            - kiwi <unfixed> (embed)
1246            NOTE: embeds msgfmt.py script
1247            - moin <unfixed> (embed)
1248            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1249            - plone3 <unfixed> (embed)
1250            NOTE: embeds msgfmt.py script
1251            - roundup <unfixed> (embed)
1252            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1253            - rednotebook <unfixed> (embed; bug #555415)
1254            NOTE: embeds msgfmt.py script
1255            - turbogears <unfixed> (embed)
1256            NOTE: embeds msgfmt.py script
1257            - elisa <unfixed> (embed)
1258            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1259            - calibre <unfixed> (embed)
1260            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1261            - mailman <unfixed> (embed; #555416)
1262            NOTE: embeds msgfmt.py script
1263            - python-docutils <unknown> (embed)
1264            NOTE: embeds stdlib modules: optparse, textwrap
1265            - python-imaging <unknown> (embed)
1266            NOTE: embeds stdlib modules: doctest
1267            - python-mechanize <unknown> (embed)
1268            NOTE: embeds stdlib modules: doctest
1269            - twill <unknown> (embed)
1270            NOTE: embeds stdlib modules: subprocess
1271            - zeroc-ice <unknown> (embed)
1272            NOTE: embeds stdlib modules: subprocess
1273            - wxwidgets2.8 <unknown> (embed)
1274            NOTE: embeds stdlib modules: subprocess
1275            - cycle <unknown> (embed)
1276            NOTE: embeds msgfmt.py script
1277            - deluge <unknown> (embed)
1278            NOTE: embeds msgfmt.py script
1279            - opendict <unknown> (embed)
1280            NOTE: embeds msgfmt.py script
1281            - openerp-client <unknown> (embed)
1282            NOTE: embeds msgfmt.py script
1283            - rapidsvn <unknown> (embed)
1284            NOTE: embeds msgfmt.py script
1285            - wammu <unknown> (embed)
1286            NOTE: embeds msgfmt.py script
1287            - gaphor <unknown> (embed)
1288            NOTE: embeds msgfmt.py script
1289            - pida <unknown> (embed)
1290            NOTE: embeds msgfmt.py script
1291            - python-formencode <unknown> (embed)
1292            NOTE: embeds msgfmt.py script
1293            - duplicity <unfixed> (embed)
1294            NOTE: embeds stdlib module: urlparse, tarfile
1295            - pygopherd <unfixed> (embed)
1296            NOTE: embeds stdlib module: zipfile
1297    
1298    argparse
1299            - twill <unfixed> (embed; bug #555347)
1300            - ipython <unfixed> (embed; bug #555348)
1301    
1302    coherence
1303            - elisa <unfixed> (embed; bug #555335)
1304    
1305    simpletal
1306            - plastex <unfixed> (embed; bug #555371)
1307    
1308    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1309            - postr <unfixed> (embed)
1310            - elisa <unfixed> (embed)
1311    
1312    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1313            - apertium-tolk <unfixed> (embed)
1314            - ipython <unfixed> (embed)
1315            - virtaal <unfixed> (embed)
1316    
1317    distribute
1318            - setuptools <removed> (old-version)
1319    
1320    rails
1321            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1322            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1323            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1324            - thin <unfixed> (embed) [./spec/rails_app/*]
1325            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1326            NOTE: be dangerous if developers are naively basing their code off of the examples
1327            NOTE: prototype.js is among the example files
1328    
1329    lucene2 (prototype.js is among the embeds in the following)
1330            - lucene <unfixed> (old-version)
1331            - pylucene <unfixed> (embed)
1332            - libpdfbox-java <unfixed> (embed)
1333            - libfontbox-java <unfixed> (embed)
1334            - libjempbox-java <unfixed> (embed)
1335            - solr <unfixed> (embed)
1336    
1337    unicode-data
1338            - syslinux <unfixed> (embed)
1339            - camomile <unfixed> (embed)
1340            - fribidi <unfixed> (embed)
1341            - m17n-db <unfixed> (embed)
1342            - sbcl <unfixed> (embed)
1343            - heimdal <unfixed> (embed)
1344            - icu <unfixed> (embed)
1345            - icu4j <unfixed> (embed)
1346            - krb5 <unfixed> (embed)
1347            - moodle <unfixed> (embed)
1348            - openldap <unfixed> (embed)
1349            - pike7.6 <unfixed> (embed)
1350            - samba <unfixed> (embed)
1351            - samba4 <unfixed> (embed)
1352            - cmucl <unfixed> (embed)
1353            - typo3-src <unfixed> (embed)
1354            - mauve <unfixed> (embed)
1355            - texlive-bin <unfixed> (embed)
1356            - ypsilon <unfixed> (embed)
1357            - jeuclid <unfixed> (embed)
1358            - charmap.app <unfixed> (embed)
1359            - clisp <unfixed> (embed)
1360            - gnulib <unfixed> (embed)
1361            - opensrs-client <unfixed> (embed)
1362            - saxonb <unfixed> (embed)
1363            - rails <unfixed> (embed)
1364    
1365    feedparser
1366            - rawdog <unfixed> (embed; bug #383422)
1367            - miro <unfixed> (embed; bug #555351)
1368            - calibre <unfixed> (embed; bug #555352)
1369            - freevo <unfixed> (embed; bug #555353)
1370            - pida <unfixed> (embed; bug #555354)
1371            - planet-venus <unfixed> (embed; bug #555355)
1372            - plone3 <unfixed> (embed; bug #555356)
1373            - exaile 0.2.14+debian-1 (embed)
1374            - screenlets 0.1.2-3 (embed)
1375            NOTE: included twice
1376    
1377    agg:
1378            - matplotlib <unfixed> (embed: bug #377271)
1379            - contextfree <unfixed> (embed)
1380            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1381            - exactimage <unfixed> (embed)
1382            - python-enable <unfixed> (embed)
1383            - mapnik 0.5.1-3 (embed)
1384            NOTE: links statically to agg, but shared library is not available (bug #377271)
1385    
1386    vtk
1387            - paraview <unfixable> (embed; bug #495426)
1388    
1389    txt2tags
1390            - rednotebook <unfixed> (embed)
1391    
1392    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1393            - gajim <unfixed> (embed)
1394            - emesene <unfixed> (embed)
1395            - convirt <unfixed> (embed)
1396            - pida <unfixed> (embed)
1397            - rednotebook <unfixed> (embed)
1398    
1399    horde3 (prototype.js is among the embeds in the following)
1400            - mnemo2 <unfixed> (embed)
1401            - nag2 <unfixed> (embed)
1402    
1403    cimg
1404            - gmic <itp> (embed)
1405    
1406    mootools
1407            - gmic <itp> (embed)
1408    
1409    openldap
1410            - openldap2.3 <removed> (old-version)
1411    
1412    grub2
1413            - grub <unfixed> (old-version)
1414    
1415    gnupginterface
1416            - duplicity <unfixed> (embed)
1417    
1418    python-dateutil
1419            - awn-extras-applets <unfixed> (embed)
1420            - matplotlib <unknown> (embed)
1421    
1422    cups
1423            - cupsys <removed> (old-version)
1424    
1425    yui
1426            - bcfg2 <not-affected> (present in source but not included in any binary files)
1427            - serendipity <unfixed> (embed; bug #557746)
1428            - moodle 1.8.2.dfsg-5 (embed)
1429            - jifty <unfixed> (embed; bug #557748)
1430            - webgui 7.7.26-1 (embed)
1431            - loggerhead 1.17-1 (embed)
1432    
1433    quake3 (vanilla source not packaged in debian)
1434            - openarena <unfixable> (fork)
1435    
1436    quake2 (vanilla source not packaged in debian)
1437            - alien-arena <unfixable> (fork)
1438            - warsow <unfixable> (fork)
1439    
1440    libtheora
1441            - iceweasel <not-affected> (uses xulrunner)
1442            - xulrunner <unfixed> (embed; bug #540959)
1443            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1444            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1445            - iceape <unfixed> (embed; bug #559276)
1446            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1447            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1448    
1449    dtoa
1450            - bfilter <unfixed> (embed)
1451            - cacao <unfixed> (embed)
1452            - cdrdao <unfixed> (embed)
1453            - classpath <unfixed> (embed)
1454            - freej <unfixed> (embed)
1455            - iceape <unfixed> (embed)
1456            - iceweasel <unfixed> (embed)
1457            - jscoverage <unfixed> (embed)
1458            - kde4libs <unfixed> (embed)
1459            - kdelibs <unfixed> (embed)
1460            - kompozer <unfixed> (embed)
1461            - libv8 <unfixed> (embed)
1462            - mono <unfixed> (embed)
1463            - newlib <unfixed> (embed)
1464            - nspr <unfixed> (embed)
1465            - php5 <unfixed> (embed)
1466            - polyml <unfixed> (embed)
1467            - qt4-x11 <unfixed> (embed)
1468            - rhino <unfixed> (embed)
1469            NOTE: code translated to Java
1470            - ruby1.8 <unfixed> (embed)
1471            - ruby1.9 <unfixed> (embed)
1472            - ruby1.9.1 <unfixed> (embed)
1473            - sdd <unfixed> (embed)
1474            - sfind <unfixed> (embed)
1475            - star <unfixed> (embed)
1476            - tinymux <unfixed> (embed)
1477            - virtualbox-ose <unfixed> (embed)
1478            - webkit <unfixed> (embed)
1479            - xulrunner <unfixed> (embed)
1480    
1481    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1482            - firegpg <unfixed> (embed)
1483            - enigmail <unfixed> (embed)
1484    
1485    ptmalloc (not packaged in Debian)
1486            - crystalspace <unfixed> (embed)
1487            - qt4-x11 <unfixed> (embed)
1488    
1489    svgalib
1490            - usplash <unfixed> (embed)
1491    
1492    bogl
1493            - usplash <unfixed> (embed)
1494    
1495    taglist
1496            - usplash <unfixed> (embed)
1497    
1498    portaudio
1499            - audacity <unfixed> (embed; bug #323711)
1500    
1501    nyquist
1502            - audacity <unfixed> (embed)
1503            NOTE: embeds a forked nyquist with support for a shared library
1504    
1505    vamp-plugin-sdk
1506            - audacity <unfixed> (embed)
1507    
1508    wordpress
1509            - libwordpress-xmlrpc-perl <unfixed> (embed) [./xmlrpc.php]

Legend:
Removed from v.8085  
changed lines
  Added in v.13474

  ViewVC Help
Powered by ViewVC 1.1.5