/[secure-testing]/data/embedded-code-copies

Diff of /data/embedded-code-copies

Parent Directory | Revision Log | View Patch Patch

-revision 13607 by jmm-guest,
Sat Dec 19 21:34:50 2009 UTC
+revision 15152 by gilbert-guest,
Sun Aug 15 03:58:59 2010 UTC
 Line 10 
 Format:
          - <embedding srcpkg> <status> (<sort>; bug #<number>)
          NOTE: optional comments about the linkage of the embedding srcpkg
- status: version number fixing the embedded copy, <unfixed>, <removed>,
+ status: version number fixing the embedded copy
-         <itp>, <not-affected>, <unknown> if the version number can not
+         <unfixed> if the issue is not yet fixed
-         be determined, or <unfixable> for unavoidable cases (e.g., forks
+         <removed> if the package was removed from the archive
-         that add real value)
+         <itp> if the package is in the process of being packaged
+         <not-affected> if the package does not use the embedded copy
+         <unknown> if the version number can not be determined
+         <unfixable> for unavoidable cases (e.g., forks that add real value)
  sort: static (linking statically against a lib)
-       embed (embedding a copy of the library into another source package)
+       embed (embeds a copy of the library into another source package)
-       fork (the package is not just embedding code but it is a fork and
+       modified-embed (embeds a code copy that differs from upstream code)
-             thus might share parts of the source code)
+       fork (a full-blown fork of another source package)
-       old-version (the package is an older version of essentially
+       old-version (an older version of essentially the same code)
-                    the same code)
  The srcpkg might be some string to identify the code if there is no
  specific source package.
  Everything up to the next line is ignored.
  ---BEGIN
- xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
+ poppler
-         NOTE: Fixed packages link to poppler library unless otherwise noted
          - pdftohtml <unknown>
          [sarge] - pdftohtml <unfixed>
          [etch] - pdftohtml <unfixed>
-Line 35 
 xpdf (some srcpkgs use xpdf2 code, some
+Line 36 
 xpdf (some srcpkgs use xpdf2 code, some
          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
          - texlive-base 3.0-12 (embed)
          - texlive-bin 2007-1 (embed)
-         NOTE: links to poppler
+         - koffice 1:2.0.0-1 (embed; bug #436163)
-         - koffice <unfixed> (embed; bug #436163)
          - libextractor 0.5.12-1 (embed)
          NOTE: libextractor is using its own pdf decoder now
          - ipe <unfixed> (embed)
          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
          - ruby-gnome2 <unknown> (embed)
-         NOTE: copy only present in source but links to poppler
          - pdfedit <unfixed> (embed; bug #510794)
-         - swftools <unfixed> (embed; bug #551293)
+         - swftools <removed> (embed; bug #551293)
-         - poppler <unfixable> (fork)
+         - xpdf 3.02-9 (fork)
+ pdksh (no longer developed since 1999)
+         - mksh <unfixable> (fork)
+         - posh <unfixable> (fork)
  ppmd
          - libcomplearn-mod-ppmd <unfixed> (fork)
-Line 53 
 ppmd
+Line 56 
 ppmd
  libevent
          - transmission 1.71-1 (embed; bug #529372)
+         - chromium-browser 5.0.375.29~r46008-1
  lrmi
          - read-edid 2.0.0-1 (embed; bug #495131)
-Line 60 
 lrmi
+Line 64 
 lrmi
          - xresprobe <unfixed> (embed)
          - zhcon <unfixed> (embed)
+ php-htmlpurifier
+         - mahara 1.2.5-1 (embed)
+         - knowledgeroot 0.9.9.5-5 (embed)
+         - moodle <unfixed> (embed)
  peercast
          - gnome-peercast <removed> (embed)
          [etch] - gnome-peercast <unfixed> (embed)
-Line 71 
 icclib
+Line 80 
 icclib
          - ghostscript <unfixed> (embed)
          - argyll <unfixed> (embed)
+ libusb
+         - argyll <unfixed> (embed)
  dietlibc
          - ccontrol 0.9.1+20071204-1 (static)
+         - mksh <unfixable> (static)
+         NOTE: /bin/mksh-static only, and only on some arches (others use eglibc)
  libmikmod
          - sdl-mixer1.2 <unfixed> (embed)
-Line 84 
 libiax
+Line 98 
 libiax
  spandsp
          - iaxmodem <unfixable> (embed; bug #548885)
+ python-paramiko
+         - fabric 0.9.0-2 (embed; bug #561398)
  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
-         - dpkg <unfixed> (static)
+         - dpkg 1.15.6 (static)
          NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
          - rsync <unfixed> (embed)
+         - cherokee <unfixed> (embed)
          NOTE: somehow derived code base
          - mono <unfixed> (embed)
          TODO: check mozilla
-Line 101 
 zlib (lots of apps embed a copy, but lin
+Line 119 
 zlib (lots of apps embed a copy, but lin
          - tra <unfixed>
          - sash <unfixed>
          - nsis <unfixed>
+         - pyfits 1:2.3.1-1
          - mseide-msegui <unfixed>
          NOTE: mseide
          - mirrordir <unfixed>
          - poco <unfixed>
          - klibc <unfixed>
+         - emboss <unfixed>
          - ghostscript <unfixed>
          - freeimage <unfixed>
          - clamav <unfixed> (fork)
          NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
-         - tuxonice-userui <unfixed>
+         - tuxonice-userui <unfixed> (static)
          - plt-scheme <unfixed>
          - perl <unfixed>
          - paraview <unfixed>
+         - velvet 0.7.56~nozlibcopy-1
          - gcvs <unfixed>
          - dump <unfixed>
          - aide <unfixed> (static)
-Line 128 
 zlib (lots of apps embed a copy, but lin
+Line 149 
 zlib (lots of apps embed a copy, but lin
          - gamera 3.2.3-1 (embed)
          - python2.4 <unfixed> (embed; bug #553403)
          - python2.5 <unfixed> (embed; bug #553403)
+         - texlive-bin <unknown> (embed)
  dulwich
          - hg-git 0.1.0-1 (embed; bug #541996)
-Line 138 
 libvigraimpex
+Line 160 
 libvigraimpex
          - gamera 3.2.3-1 (embed)
  libbz2
-         - dpkg <unfixed> (static)
+         - dpkg 1.15.6 (static)
+         - amd64-libs <unfixed> (static)
+         NOTE: let's call it "static"
+         - dar <unfixed> (static)
+         - dump <unfixed> (static)
+         - unalz <unfixed> (embed)
+         NOTE: has code, by the maint, to use the system version but links against the internal copy
+ libyahoo2
+         - centerim <unfixed> (embed; bug #559783)
+ libmsn
+         - centerim <unfixed> (embed; bug #559783)
  libgadu
          - centerim <unfixed> (embed; bug #559783)
-Line 155 
 xmlrpc (which package is the "origin" of
+Line 189 
 xmlrpc (which package is the "origin" of
          - phpgroupware <unfixed> (embed)
          - egroupware <unfixed> (embed)
          - phpwiki <unfixed> (embed)
-         - php4 <unfixed> (embed)
+         - php4 <removed> (embed)
          TODO: check, php-pear, IIRC this was reorganized some weeks ago?
  shtool (affects build-time only)
          - mysql-ocaml <unfixed> (embed)
-         - php4 <unfixed> (embed)
+         - php4 <removed> (embed)
+         - php5 <unfixed> (embed)
- iceape
+ xulrunner
-         - iceweasel <unfixed> (fork)
+         - iceape <unfixed> (embed; bug #561749)
-         - icedove <unfixed> (fork)
+         - iceweasel 2.0.0.19 (embed)
-         - xulrunner <unfixed> (fork)
+         - icedove <unfixed> (embed; bug #561750)
          - kompozer <unfixed> (embed; bug #532168)
-         - galeon <unfixed> (fork)
+         - galeon 2.0.2-4 (embed)
-         - epiphany-browser <unfixed> (fork)
+         - epiphany-browser 2.14.3-8 (embed)
-         - conkeror <unfixed> (fork)
+         - conkeror 0.9~git080629-2 (embed)
-         - kazehakase <unfixed> (fork)
+         - kazehakase 0.4.2-1 (embed)
  xli
          - xloadimage <unfixed> (embed)
  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
          - openmotif <unfixed> (embed)
-         - libxpm <unfixed> (embed)
+ libxpm
+         - lesstif2 <unfixed> (embed; bug #575750)
  kerberized apps with BSD origin
          - krb4 <removed> (embed)
-Line 198 
 fudforum
+Line 235 
 fudforum
  libbsd
          - rdate 1:1.2-3 (embed)
          - atheme-services <unfixed>
-         - libbsd-arc4random-perl <unfixed>
+         - libbsd-arc4random-perl <not-affected> (modified-embed)
+         NOTE: code not used, it links dynamically against libbsd instead
          - isakmpd <unfixed>
          - bsdgames <unfixed> (embed)
          - bsd-mailx <unfixed> (embed)
          - netcat-openbsd <unfixed> (embed; bug #550611)
          - openssh <unfixed> (embed)
          - unworkable <unfixed> (embed)
+         - mksh <unfixed> (modified-embed)
+         NOTE: strlcpy(), only used in /bin/mksh-static on eglibc arches
+         NOTE: FIXME, we should only have one entry: - mksh <not-affected> (modified-embed)
+         NOTE: strlcpy() on dietlibc arches; {g,s}etmode(); both unused
  cvs
          - gcvs <unfixed> (embed)
          NOTE: see cvsunix/src in tarball
  pcre3
-         - php4 <unknown> (embed)
+         - php4 <removed> (embed)
          - analog 2:5.23-0woody1 (embed)
          - goffice <unfixed> (embed)
          NOTE: libgoffice-*
-Line 231 
 pcre3
+Line 273 
 pcre3
          - qt4-x11 <unfixed> (embed)
          NOTE: embedded via webkit copy
          - erlang <unfixed> (embed)
+         - ssed <unfixed> (embed)
+         - ircd-hybrid <unfixed> (static)
+         - emboss <unfixd>
+         - cherokee <unfixed> (embed)
+         - oftc-hybrid <unfixed> (embed)
+         - ratbox-services <unfixed> (embed)
+         - squeak-vm <unfixed> (embed)
+         - tinymux <unfixed> (embed)
  tiff
          - wxwindows2.4 2.2.1 (embed)
          - gamera 3.2.3-1 (embed)
+         - freeimage <unfixed> (embed)
+         - libtk-img <unfixed> (embed)
+         NOTE: there are two copies, one under tiff/ other under libtiff/
+         - gdal <unfixed>
  uudeview
          - libconvert-uulib-perl <unfixed> (embed)
-Line 276 
 ffmpeg (libavcodec/libavformat)
+Line 330 
 ffmpeg (libavcodec/libavformat)
          TODO: gimp-gap (potentially using ffmpeg code as well)
          - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
          - audacity 1.3.7-2 (embed; bug #512278)
+         - chromium-browser <unfixed> (fork)
  faad2
          - mplayer 1.0~rc2-20 (embed)
          - avifile <unfixed> (embed; bug #538750)
-         - ffmpeg-debian <removed> (old-version)
+         - ffmpeg-debian <removed> (embed)
  libmad (MPEG decoding lib)
          - xine-lib <unfixed> (embed)
-Line 297 
 liba52
+Line 352 
 liba52
          - a52dec <unfixed> (embed)
          - xine-lib <unfixed> (embed)
- libmpeg2
+ mpeg2dec (libmpeg2)
-         - mpeg2dec <unfixed> (embed)
          - xine-lib <unfixed> (embed)
+ libmpeg3
+         - squeak-vm <unfixed> (embed)
  libntlm
          - wget <unfixed> (fork; bug #550436)
          - curl <unfixed> (fork; bug #550437)
-Line 320 
 python-urlgrabber
+Line 377 
 python-urlgrabber
  beautifulsoup
          - python-mechanize <unfixed> (embed; bug #555349)
-         - zope2.11 <unfixed> (embed; bug #555350)
+         - zope2.11 <removed> (embed; bug #555350)
          - twill <unknown> (embed)
  halibut
-Line 354 
 fckeditor
+Line 411 
 fckeditor
          - karrigell <removed> (embed; bug #452598)
          - gforge 4.6.99+svn6225-1 (embed)
          - request-tracker3.8 <unfixed> (embed)
+         - otrs2 <unfixed> (embed)
  ipatlas (not packaged in Debian)
          - moodle <unfixed> (embed; bug #507185)
-Line 361 
 ipatlas (not packaged in Debian)
+Line 419 
 ipatlas (not packaged in Debian)
  libphp-phpmailer
          - moodle <unfixed> (embed; bug #507185)
          - mahara <unfixed> (embed)
-         - symfony <unfixed> (embed)
+         - symfony <unfixed> (embed; bug #566778)
          [etch] - phpgroupware <unfixed> (embed)
          NOTE: phpgroupware-felamimail is only in etch
          - egroupware <unfixed> (embed; bug #504283)
-Line 412 
 libphp-adodb
+Line 470 
 libphp-adodb
          - mahara <unfixed> (embed)
  gzip
-         - linux-kernel <unfixed> (embed)
+         - linux-2.6 <unfixed> (embed) [lib/inflate.c]
-         NOTE: lib/inflate.c
          - klibc <unfixed> (embed)
          NOTE: based on linux-kernel gzip code
          - busybox <unfixed> (embed)
+         - pristine-tar <unfixed> (modified-embed)
+         NOTE: compression code only, not uncompression
+         - ncompress <unfixed> (old-version)
  neon
          - cadaver 0.22.3+debian-1 (embed; bug #188381)
-Line 429 
 neon
+Line 489 
 neon
          [sarge] - tla <unfixed> (embed; bug #395877)
  libmodplug
-         - gst-plugins-bad0.10 <unfixed> (embed)
+         - gst-plugins-bad0.10 0.10.10.2-1 (embed)
  libvncserver
          - vino <unfixed> (embed)
-Line 475 
 gv
+Line 535 
 gv
          NOTE: evince-gtk is affected (a component of evince source package)
  libXbae
-         - paw <removed> (embed)
+         - paw <unfixed> (embed)
-         [etch] - paw <unfixed> (embed)
  libgtkhtml
          - claws-mail-extra-plugins <unfixed> (fork)
  libXaw
-         - paw <removed> (embed)
+         - paw <unfixed> (embed)
-         [etch] - paw <unfixed> (embed)
          NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
  libgd2
          - graphviz <unfixed> (embed)
          NOTE: lib/gd seems to be 2.0.33
-         - wml <unfixed> (embed)
+         - wml 2.0.11ds2-1 (embed)
          - libwmf <unfixed> (embed)
          NOTE: derived from gd 1.6.3
+         - texlive-bin 2009-1 (embed)
  rar
          - unrar-nonfree <unfixed> (embed)
-Line 537 
 libidn
+Line 596 
 libidn
          - kdegames <unfixed> (embed)
          NOTE: kdegames/kde4 embeds libiris which embeds libidn
- liblua
+ lua5.1
          - monotone 0.43-1 (embed)
          - nmap 5.00-1 (embed; bug #527997)
          [lenny] - nmap <unfixed> (embed; bug #527997)
-Line 545 
 liblua
+Line 604 
 liblua
          - enigma <unfixed> (embed)
          NOTE: requires lua built with C++
          - freeciv <unfixed> (embed)
+         - spring <unfixed> (embed)
  libbotan
          - monotone 0.43-1 (embed)
-Line 564 
 lzo
+Line 624 
 lzo
  yassl
          - mysql-dfsg-5.0 <unfixed> (embed)
+         - mysql-5.1 <unfixed> (embed)
  pax code
          - tar <unfixed> (embed)
-Line 615 
 plib1.8.4c2
+Line 676 
 plib1.8.4c2
          NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
  fribidi
-         - quesoglc <unfixed> (embed)
+         - quesoglc 0.7.2-2 (embed)
-         NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
  glew
          - quesoglc <unfixed> (embed; bug #489341)
          NOTE: waiting on GLEW_MX version of glew (see bug #474488)
-         - trigger <unfixed> (embed)
+         - trigger 0.5.2.1-2 (embed)
          NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
-         - trigger-rally <unfixed> (embed)
+         - trigger-rally 0.5.2.1-2 (embed)
          NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
+         - chromium-browser 5.0.375.70~r48679-2
  minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
          - transcend <unfixed> (embed)
-Line 640 
 cpio
+Line 701 
 cpio
          - libarchive <unfixed> (embed)
          NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
+ kde4libs
+         - kdelibs <unfixable> (old-version)
  webkit
          - qt4-x11 <unfixed> (embed; bug #479851)
-         - kdelibs <unfixed> (old-version)
+         [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
-         - kde4libs <unfixed> (fork)
+         - kde4libs <unfixable> (fork)
+         NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
+         NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
+         - chromium-browser <unfixed> (fork)
  ftgl
          - blender 2.46+dfsg-1 (embed)
-Line 652 
 wv
+Line 719 
 wv
          - abiword <unfixed>
  qemu
-         - kvm <unfixed> (embed; bug #543159)
+         - kvm <removed> (embed; bug #543159)
-         NOTE: the kvm package will be removed from sid and squeeze soon (after
-         NOTE: which it will only be in experimental). superceded by qemu-kvm.
          - qemu-kvm <unfixed> (embed; bug #560853)
+         NOTE: kvm superceded by qemu-kvm, which is just user interface (no modules)
          - xen-3 3.4.2-2 (embed; bug #560856)
          - xen-unstable <unfixed> (embed; bug #560856)
  vgabios
-         - kvm <unfixed> (embed; bug #489442)
+         - kvm <removed> (embed; bug #489442)
+         - qemu-kvm <unfixed> (embed)
  bochs
-         - kvm <unfixed> (embed; bug #489442)
+         - kvm <removed> (embed; bug #489442)
+         - qemu-kvm <unfixed> (embed)
  speex
          - vorbis-tools <unfixed> (embed)
-Line 697 
 mochikit
+Line 765 
 mochikit
          - coherence 0.6.2-1 (embed)
          - paste <unfixed> (embed)
          - turbogears <unfixed> (embed)
-         - plone3 <unfixed> (embed)
+         - plone3 <removed> (embed)
          - xulrunner <unfixed> (embed)
          - libjifty-plugin-chart-perl <unfixed> (embed)
          - sabnzbdplus <unfixed> (embed)
-Line 711 
 prototypejs
+Line 779 
 prototypejs
          - libjson-ruby 1.1.4-1 (embed; bug #555224)
          - lucene2 2.9.1+ds1-2 (embed; bug #555226)
          - horde3 <unfixed> (embed)
-         - knowledgeroot <unfixed> (embed; bug #555230)
+         - knowledgeroot 0.9.8.5-4 (embed; bug #555230)
-         - mediatomb <unfixed> (embed; bug #555233)
+         - mediatomb 0.12.0~svn2018-5 (embed; bug #555233)
          - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
          - ebug-http <unfixed> (embed; bug #555236)
          - libaws 2.7-1 (embed; bug #555222)
          - phpgedview <removed> (embed)
-         - poker-network <unfixed> (embed; bug #555238)
+         - poker-network 1.7.6-1 (embed; bug #555238)
          - rails 2.1.0-6 (embed)
          - wordpress 2.5.0-2 (embed; bug #555243)
          - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
-Line 726 
 prototypejs
+Line 794 
 prototypejs
          - exaile 0.2.14+debian-2.1 (embed; bug #555245)
          - hobix 0.5~svn20070319-4 (embed; bug #555247)
          - zabbix 1.6.6-4 (embed; bug #555250)
-         - chora2 <unfixed> (embed; bug #555253)
+         - chora2 2.1.1+debian0-1 (embed; bug #555253)
-         - gollem <unfixed> (embed; bug # 555254)
+         - gollem 1.1.1+debian0-1 (embed; bug # 555254)
          - jscropperui 1.2.1-1 (embed; bug #555257)
          - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
-         - ingo1 <unfixed> (embed; bug #555261)
+         - ingo1 1.2.3+debian0-1 (embed; bug #555261)
-         - kronolith2 <unfixed> (embed; bug #555262)
+         - kronolith2 2.3.3+debian0-1 (embed; bug #555262)
-         - activeldap <unfixed> (embed)
+         - activeldap 1.2.1-1 (embed)
          - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
-         - mantis <unfixed> (embed; bug #555265)
+         - mantis 1.1.2+dfsg-1 (embed; bug #555265)
          - otrs2 2.3.4-6 (embed; bug #555267)
-         - webcalendar <unfixed> (embed; bug #555269)
+         - webcalendar 1.2~b1-2 (embed; bug #555269)
          - redmine 0.9.0~svn2907-1 (embed; bug #555270)
          - jifty 0.90519-1 (embed; bug #555271)
-         - jquery <unfixed> (embed; bug #555272)
+         - jquery 1.4-1 (embed; bug #555272)
          - passenger 2.2.5debian1-1 (embed; bug #555273)
-         - plone3 <unfixed> (embed; bug #555275)
+         - plone3 <removed> (embed; bug #555275)
          - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
          - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
          - xulrunner <unfixed> (embed)
          NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
+         - jclicmoodle <unfixed> (embed)
+         - git-cola <unfixed> (embed)
  gdb
          - insight <unfixed> (embed)
-Line 789 
 jquery
+Line 859 
 jquery
          NOTE: compressed file under examples/ dir
          - prewikka <unfixed> (embed)
          - libramaze-ruby <unfixed> (embed)
-         - drupal5 <unfixed> (embed)
+         - drupal6 <unfixed> (embed)
          - b2evolution <unfixed> (embed)
          - wesnoth <unfixed> (embed)
-Line 809 
 magpierss
+Line 879 
 magpierss
  php-gettext
          - wordpress 2.8.4-1 (embed; bug #504242)
+         - docbookwiki <unfixed> (embed)
+         - knowledgeroot 0.9.9.5-1
+         NOTE: non-free
  libphp-ixr (name may change, it is the Incutio XML-RPC)
          - wordpress <unfixed> (embed; bug #504242)
-Line 843 
 libmarkdown-php
+Line 916 
 libmarkdown-php
          - pixelpost 1.7.1-6 (embed)
  php-openid
-         - wordpress-openid <itp> (embed)
+         - wordpress-openid 3.3.2-1 (embed)
  geshi
          - dokuwiki 0.0.20080505-3.1 (embed)
-Line 854 
 webcalendar
+Line 927 
 webcalendar
          - gforge 4.7~rc2-6 (embed; bug #504758)
  libical
-         - kdepim <unfixed> (fork)
+         - kdepim <unknown> (fork)
-         - kdepimlibs <unfixed> (fork)
+         NOTE: fixed at some point during 4.0
-         NOTE: fixed in KDE4 post 4.1.x series
+         - kdepimlibs 4.2.0-1 (fork)
          - claws-mail-extra-plugins <unfixed> (fork)
- libltdl3
-         - kdelibs <unfixed> (embed)
-         NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
-         - synfig <unfixed> (embed)
  harfbuzz
          - qt4-x11 <unfixed> (embed)
+         - pango1.0 <unfixed> (embed)
+         - fontmatrix <unfixed> (embed)
  libzip
-         - php5 <unfixed> (fork)
+         - php5 <unfixable> (modified-embed)
          - odt2txt <unfixed> (embed; bug #523808)
  json.php (not packaged; should be replaced with php's built-in functions)
-Line 911 
 rssparser (http://nwow.org)
+Line 981 
 rssparser (http://nwow.org)
  lcms
          - openjdk-6 <unfixed> (fork)
+         - gimp 2.4.0~rc2-2
  libphp-phplayersmenu
          - diogenes <unfixed>
-Line 923 
 libphp-pclzip
+Line 994 
 libphp-pclzip
  libphp-simplepie
          - dokuwiki <unfixed>
+         - wordpress <unfixed>
  libphp-jpgraph
          - egroupware <unfixed>
-Line 938 
 libpng
+Line 1010 
 libpng
          [lenny] - xulrunner 1.9.0.11-0lenny1
          [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
          - gamera 3.2.3-1 (embed)
+         - freeimage <unfixed> (embed)
+         - tuxonice-userui <unfixed> (static)
  irssi
          - silc-client <unfixed> (embed)
-Line 956 
 libitext-java
+Line 1030 
 libitext-java
  python-ply
          - pyke <unfixed> (embed; bug #555363)
-         - pywbem <unfixed> (embed; bug #555364)
+         - pywbem 0.7.0-4 (embed; bug #555364)
          - sepolgen <unfixed> (embed; bug #555365)
          - zope-textindexng3 <unknown> (embed)
          - iceweasel <not-affected> (uses xulrunner)
-Line 981 
 yajl
+Line 1055 
 yajl
  nusoap
          - gforge 4.8.2-1 (embed)
+         - ampache <unfixed> (embed)
+         - poker-network <unfixed> (embed)
+         - moodle <unfixed> (embed)
+         NOTE: code is not used when running under php5 and soap is enabled
+         - phpwiki <unfixed> (embed)
+         - gallery2 <unfixed> (embed)
+         - typo3-src <unfixed> (embed)
  libept
          - adept <unfixed> (embed; bug #540649)
-Line 1017 
 liboggplay
+Line 1098 
 liboggplay
          [lenny] - iceape <not-affected> (introduced in 2.0)
  php-net-dnsbl
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740; package in NEW)
  php-onyx-rss
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740; wontfix: only one script, own package is overkill, appears not to be duplicated in Debian)
  php-text-wiki
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740; package in NEW)
  php-xml-rpc
-         - serendipity <unfixed> (embed)
+         - serendipity <unfixed> (embed; bug #541740; package in NEW)
  polarssl (does not have a shared library)
          - pdkim <itp> (embed; bug #543150)
          - xyssl <unfixed> (old-version)
- pidgin
+ pidgin (libpurple)
          - gaim <removed> (old-version)
-         - qutecom <unfixed> (embed; bug #559785)
+         - qutecom 2.2~rc3.hg396~dfsg1-6 (embed; bug #559785)
  icu
          - webkit 1.0.1-1 (embed; bug #547214)
          - texlive-bin <unfixed> (fork)
          NOTE: texlive upstream working with icu upstream to merge their changes
+         - chromium-browser 5.0.375.29~r46008-3
  cyrus-imapd-2.2
          - kolab-cyrus-imapd <unfixed> (fork)
-Line 1054 
 zipios++
+Line 1136 
 zipios++
          NOTE: likely fixed earlier, marking etch's version as fixed
  linux-2.6
-         - kvm <unfixed> (embed; bug #549973) [./kernel/*]
+         - kvm <removed> (embed; bug #549973) [./kernel/*]
          - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
          - kernel-source-2.6.8 <removed> (old-version)
          - kernel-source-2.4.27 <removed> (old-version)
-Line 1063 
 linux-2.6
+Line 1145 
 linux-2.6
          - kernel-source-2.2.20 <removed> (old-version)
  libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
-         - kvm <unfixed> (embed) [./libfdt/*]
+         - kvm <removed> (embed) [./libfdt/*]
+         - qemu-kvm <unfixed> (embed) [./libfdt/*]
  qweb (not packaged)
          - ajaxterm <unfixed>
-Line 1091 
 expat
+Line 1174 
 expat
          NOTE: Maybe that was fixed even earlier
          - audacity 1.3.2-1 (embed)
          - matanza <unfixed> (embed)
-         - tdom <unfixed> (embed)
+         - tdom 0.8.3~20080525-1 (embed)
          - udunits 2.1.8-4 (embed)
          - apr-util 1.2 (embed)
          - ayttm <unfxed> (embed; bug #561006)
-Line 1100 
 expat
+Line 1183 
 expat
          - cmake 2.6.0-6 (embed)
          - coin3 <unfixed> (embed)
          - gdcm 2.0.14-2 (embed)
-         - ghostscript <unfixed> (embed)
+         - ghostscript 8.71~dfsg-2 (embed)
-         - grmonitor <unfixed> (embed)
+         - grmonitor <removed> (embed)
          - iceape <unfixed> (embed)
          - insighttoolkit 3.16.0-1 (embed)
          NOTE: insighttoolkit might've been fixed earlier
-         - libparagui1.1 <unfixed> (embed)
+         - libparagui1.1 1.0.2-1 (embed)
-         - paraview <unfixed> (embed)
+         - paraview 3.6.2-1 (embed)
-         - poco <unfixed> (embed)
+         - poco 1.3.6p1-1 (embed)
          - simgear <unfixed> (embed)
          - sitecopy 1:0.16.0-1
-         - smart 1.0-1 (embed)
+         - smart <unfixed> (embed)
-         - swish-e <unfixed> (embed)
+         NOTE: smart embeds celementree, and it includes expat
-         - tla <unfixed> (embed)
+         - swish-e <not-affected> (Linked against libxml, which is used instead)
+         - tla 1.3.5+dfsg-15 (embed)
          - vtk 4.1.20030227-1 (embed)
-         - wbxml2 <unfixed> (embed)
+         - wbxml2 <not-affected> (expat code is only used on Mac OS X, see #560941)
          - xmlrpc-c <unfixed> (embed)
          - iceweasel <unfixed> (embed)
          - kompozer <unfixed> (embed)
-Line 1123 
 expat
+Line 1207 
 expat
          - apache2 2.2 (embed)
          - texlive-bin <not-affected> (Embedded code not compiled in)
          - vnc4 <unfixed> (embed)
-         - xotcl <unfixed> (embed)
+         - xotcl 1.6.6-1 (embed)
+         - chromium-browser 5.0.375.29~r46008-3
  xerces-c
          - xerces-c2 <unfixed> (old-version)
-Line 1133 
 md5 (RSA's version; not the gnu version
+Line 1218 
 md5 (RSA's version; not the gnu version
          - w3c-libwww <removed> (embed; bug #551942)
          [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
+ libparagui1.1
+         - asc <unfixable> (fork)
  enet
          - sauerbraten <unfixed> (embed; #497194)
  eglibc
          - glibc <removed> (old-version)
+         - mksh <unfixable> (static)
+           NOTE: /bin/mksh-static only, and only on some arches (others use dietlibc)
  galib
          - gamera 3.2.3-1 (embed)
  configobj
-         - bzr <unfixed> (embed; bug #555336)
+         - bzr 2.1.0~rc2-1 (embed; bug #555336)
          - elisa <unfixed> (embed; bug #555337)
          - gaupol <unfixed> (embed; bug #555338)
          - ipython <unfixed> (embed; bug #555339)
-Line 1160 
 configobj
+Line 1250 
 configobj
  python-clientform
          - bibus <unfixed> (embed; bug #555332)
          - zope2.10 <unfixed> (embed; bug #555333)
-         - zope2.11 <unfixed> (embed; bug #555334)
+         - zope2.11 <removed> (embed; bug #555334)
          - python-mechanize <unknown> (embed)
          - twill <unknown> (embed)
  python-mechanize
          - zope2.10 <unfixed> (embed; bug #555337)
-         - zope2.11 <unfixed> (embed; bug #555338)
+         - zope2.11 <removed> (embed; bug #555338)
          - twill <unknown> (embed; bug #555339)
  pexpect
-Line 1179 
 pyparsing
+Line 1269 
 pyparsing
          - boa-constructor 0.6.1-8 (embed; bug #555367)
          - calibre <unfixed> (embed; bug #555368)
          - matplotlib <unfixed> (embed; bug #531024)
-         - zhpy <unfixed> (embed; bug #555370)
+         - zhpy 1.7.3.1-1 (embed; bug #555370)
          - polybori <unknown> (embed)
          - python-whoosh <unknown> (embed)
          - twill <unknown> (embed)
-Line 1191 
 python-pysqlite2
+Line 1281 
 python-pysqlite2
  celementtree
          - python2.5 <unfixed> (embed)
-         - smart 1.0-1 (embed)
+         - smart <unfixed> (embed)
-         [etch] - smart <unfixed> (embed)
  elementtree
          - python2.5 <unfixed> (embed)
-         - bzr <unfixed> (embed; bug #555343)
+         - python2.6 <unfixed> (embed)
+         - bzr 2.1.0~rc2-1 (embed; bug #555343)
          - gedit 2.28.2-1 (embed; bug #555344)
-         - smart 1.0-1 (embed)
+         - smart <unfixed> (embed)
-         [etch] - smart <unfixed> (embed)
          - solfege <unfixed> (embed; bug #555345)
          - w3af <unfixed> (embed; bug #555346)
          - python-qt4 <unknown> (embed)
-Line 1220 
 python2.5
+Line 1309 
 python2.5
          NOTE: embeds stdlib modules: ConfigParser
          - museek+ <unfixed> (embed; bug #555428)
          NOTE: embeds stdlib modules: ConfigParser
-         - vegastrike-data <unfixed> (embed)
+         - vegastrike-data <removed> (embed)
          NOTE: embeds many stdlib modules
          - codespeak-lib 1.1.1-1 (embed; bug #555420)
          NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
-Line 1250 
 python2.5
+Line 1339 
 python2.5
          NOTE: embeds stdlib modules: uuid
          - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
          NOTE: embeds stdlib modules: uuid
-         - setroubleshoot <unfixed> (embed; bug #555431)
+         - setroubleshoot <removed> (embed; bug #555431)
          NOTE: embeds stdlib modules: uuid
          - linkchecker <unfixed> (embed; bug #555414)
          NOTE: embeds msgfmt.py script
-Line 1260 
 python2.5
+Line 1349 
 python2.5
          NOTE: embeds msgfmt.py script
          - moin <unfixed> (embed)
          NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
-         - plone3 <unfixed> (embed)
+         - plone3 <removed> (embed)
          NOTE: embeds msgfmt.py script
          - roundup <unfixed> (embed)
          NOTE: embeds msgfmt.py script, stdlib modules: cgitb
-Line 1272 
 python2.5
+Line 1361 
 python2.5
          NOTE: embeds msgfmt.py script, stdlib modules: uuid
          - calibre <unfixed> (embed)
          NOTE: embeds msgfmt.py script, stdlib modules: zipfile
-         - mailman <unfixed> (embed; #555416)
+         - mailman 1:2.1.13-1 (embed; #555416)
          NOTE: embeds msgfmt.py script
          - python-docutils <unknown> (embed)
          NOTE: embeds stdlib modules: optparse, textwrap
-Line 1383 
 feedparser
+Line 1472 
 feedparser
          - freevo <unfixed> (embed; bug #555353)
          - pida <unfixed> (embed; bug #555354)
          - planet-venus <unfixed> (embed; bug #555355)
-         - plone3 <unfixed> (embed; bug #555356)
+         - plone3 <removed> (embed; bug #555356)
          - exaile 0.2.14+debian-1 (embed)
          - screenlets 0.1.2-3 (embed)
          NOTE: included twice
-Line 1413 
 htmltextview (not packaged in Debian, ht
+Line 1502 
 htmltextview (not packaged in Debian, ht
  horde3 (prototype.js is among the embeds in the following)
          - mnemo2 <unfixed> (embed)
          - nag2 <unfixed> (embed)
+         - wordpress <unfixed> (embed)
+         NOTE: Text_Diff (wp-includes/Text/Diff*)
  cimg
-         - gmic <itp> (embed)
+         - gmic <unfixed> (embed)
  mootools
-         - gmic <itp> (embed)
+         - kdenetwork <unfixed> (embed)
+         - gallery <unfixed> (embed)
+         - jspwiki <unfixed> (embed)
+         - vdr-plugin-live <unfixed> (embed)
+         - perl-doc-html <unfixed> (embed)
  openldap
          - openldap2.3 <removed> (old-version)
-Line 1438 
 cups
+Line 1533 
 cups
  yui
          - bcfg2 <not-affected> (present in source but not included in any binary files)
-         - serendipity <unfixed> (embed; bug #557746)
+         - serendipity 1.5.3-1 (embed; bug #557746)
          - moodle 1.8.2.dfsg-5 (embed)
          - jifty 0.91117-1 (embed; bug #557748)
          - webgui 7.7.26-1 (embed)
          - loggerhead 1.17-1 (embed)
+         - otrs2 2.4.7+dfsg1-1 (embed; bug #592146)
  quake3 (vanilla source not packaged in debian)
          - openarena <unfixable> (fork)
-Line 1462 
 libtheora
+Line 1558 
 libtheora
  dtoa
          - bfilter <unfixed> (embed)
-         - cacao <unfixed> (embed)
+         - cacao <removed> (embed)
          - cdrdao <unfixed> (embed)
          - classpath <unfixed> (embed)
          - freej <unfixed> (embed)
-Line 1521 
 vamp-plugin-sdk
+Line 1617 
 vamp-plugin-sdk
  wordpress
          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
+         - wordpress-mu <removed> (fork)
  php5
          - php4 <removed> (old-version)
  classpath
-         - libgnucrypto-java <unfixed> (embed; bug #559788)
+         - libgnucrypto-java <removed> (embed; bug #559788)
  libtool
          - apr <unfixed> (static; bug #489625)
          NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
          - arts <unfixed> (embed)
-         - bochs <unfixed> (embed; bug #560884)
+         - bochs 2.4.2-1 (embed; bug #560884)
          - camserv <unfixed> (embed)
-         - collectd <unfixed> (embed)
+         - collectd 4.8.2-1 (embed)
          - courier-authlib 0.58-4 (embed)
          NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
-         - cvsnt <unfixed> (embed)
+         - cvsnt 2.5.04.3236-1.2 (embed)
          - dico <not-affected> (Uses the system copy of ltdl)
          - freeradius 0.1+20010527-1 (embed)
          NOTE: Earliest reference I could find from the changelog is from 27 May 2001
          - ggobi 2.1.9~20091212-1 (embed)
-         - glame <unfixed> (embed)
+         - glame 2.0.1-4 (embed)
-         - gnash <unfixed> (embed)
+         NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
-         - gnu-smalltalk <unfixed> (embed)
+         - gnash 0.8.7-2 (embed)
-         - google-gadgets <unfixed> (embed)
+         - gnu-smalltalk <unfixed> (embed; bug #566777)
+         - google-gadgets 0.10.5-0.3 (embed)
+         NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
          - graphicsmagick 1.3.5-6 (embed)
          - graphviz 2.8-3 (embed)
          NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
          - guile-1.6 1.6.8-7 (embed)
-         - hamlib <unfixed> (embed)
+         - hamlib 1.2.11-1 (embed)
-         - hercules <unfixed> (embed)
+         - hercules 3.06-1.2 (embed)
          - jags 1.0.4-3 (embed; bug #560864)
          - kdelibs <unfixed> (embed)
          - libannodex <removed> (embed)
-         - libextractor <unfixed> (embed)
+         - libextractor 0.5.23+dfsg-4 (embed)
          - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
-         - libtunepimp <unfixed> (embed)
+         - libtunepimp 0.5.3-7.3 (embed)
-         - mp4h <unfixed> (embed)
+         - mp4h 1.3.1-4.1 (embed)
-         - naim <unfixed> (embed)
+         - naim <removed> (embed)
          - parser-mysql <unfixed> (embed)
-         - pinball <unfixed> (embed)
+         - pinball 0.3.1-11 (embed)
          - redland <unfixed> (embed)
          - siproxd <unfixed> (embed)
          - ski <unfixed> (embed)
-         - synfig <unfixed> (embed)
+         - synfig 0.62.00-1 (embed)
          - unixodbc 2.2.4-5 (embed)
          - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
          - clamav 0.95+dfsg-1 (embed)
-         - imagemagick <unfixed> (embed)
+         - imagemagick 6:6.2.3.1-1 (embed)
          - hypre 2.4.0b-5 (embed)
          - lam <unfixed> (embed)
          - openmpi <unfixable> (embed; bug #559386)
          - parser <unfixed> (embed)
-         - pdsh <unfixed> (embed; bug #560892)
+         - pdsh 2.18-5 (embed; bug #560892)
          - sbnc 1.2-8 (embed)
          - sdcc <unfixed> (embed)
-         - wml <unfixed> (embed)
+         - wml <not-affected> (The embedded ltdl isn't used, instead mp4h is used, see 559841)
-         - proftpd-dfsg <unfixed> (embed)
+         - proftpd-dfsg <unfixed> (embed; bug #561748)
          - babel 1.4.0.dfsg-5 (embed)
          - libprelude 0.9.14-2 (embed)
          - heartbeat 2.1.4-7 (embed)
-Line 1594 
 xdotool
+Line 1693 
 xdotool
  bulletphysics (not packaged; http://www.bulletphysics.org/)
          - supertuxkart <unfixed> (embed)
+         - blender <unfixed> (embed)
  ghostscript
          - gs-gpl <removed> (old-version)
+ icedove
+         - thunderbird <removed> (old-version)
+ sizzlejs (not packaged in Debian, http://sizzlejs.com/)
+         - jquery <unfixed> (embed)
+ sed
+         - ssed <unfixed> (fork)
+ phpatomlib (http://code.google.com/p/phpatomlib)
+         - wordpress <unfixed> (embed)
+ Services_JSON (http://pear.php.net/package/Services_JSON)
+         - wordpress <unfixed> (embed)
+ phpass (http://www.openwall.com/phpass/)
+         - gallery2 <unfixed> (embed)
+         - wordpress <unfixed> (embed)
+         - typo3-src <unfixed> (modified-embed)
+         NOTE: file refers to drupal, maybe there's a copy somewhere there
+         NOTE: a copyright owner search didn't match anything
+         - libauthen-passphrase-perl <unfixable> (fork)
+         NOTE: perl implementation of phpass
+ squirrelmail
+         - wordpress <unfixed> (embed)
+         NOTE: class-pop3.php
+ ezSQL (http://www.woyano.com/jv/ezsql)
+         - wordpress <unfixable> (fork)
+         NOTE: wp-db.php
+ Diff.php (Clay Loveless' version/killersoft.com)
+         - php-versioncontrol-svn <unfixed>
+ libm (provided by libc)
+         - spring <unfixed> (embed)
+         NOTE: embedded by embedded copy of streflop
+         - aide <unfixed> (static)
+         - busybox <unfixed> (static)
+         - mindi-busybox <unfixed> (static)
+         - qemu <unfixed> (static)
+         NOTE: qemu-user-static
+         - tuxonice-userui <unfixed> (static)
+         - zsh <unfixed> (static)
+         NOTE: zsh-static
+         - tripwire <unfixed>
+ streflop
+         - spring <unfixed> (embed)
+ minizip
+         - spring <unfixed> (embed)
+ oscpack
+         - spring <unfixed> (embed)
+ hpiutil2
+         - spring <unfixed> (embed)
+ p7zip
+         - spring <unfixed> (embed)
+ pythonqt (doesn't seem to be python-qtN, unknown source)
+         - fontmatrix <unfixed> (embed)
+         - elmerfem <unfixed> (embed)
+ iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
+         - docvert <unfixed> (embed)
+         - jifty <unfixed> (embed)
+         - kdenetwork <unfixed> (embed)
+         - mediatomb <unfixed> (embed)
+         - plastex <unfixed> (embed)
+         - plone3 <removed> (embed)
+         - python-chaco <unfixed> (embed)
+         - python-docutils <unfixed> (embed)
+         - s5 <unfixed> (embed)
+         - zope2.10 <unfixed> (embed)
+         - zope2.11 <removed> (embed)
+         - cython <not-affcted> (embed)
+         NOTE: part of documentation, which is not installed into the binary package
+ python-docutils
+         - zope2.10 <unfixed> (embed)
+         - zope2.11 <removed> (embed)
+ tesseract
+         - ocropus <unfixed> (static)
+ antlr
+         - kdevelop <unfixed> (embed)
+ libxerces2
+         - openjdk-6 <unfixed> (embed)
+ kfreebsd-8
+         - kfreebsd-7 <unfixed> (old-version)
+         - kfreebsd-6 <removed> (old-version)
+ ruby1.9.1
+         - ruby1.9 <unfixed> (old-version)
+         - ruby1.8 <unfixed> (old-version)
+ maildrop
+         - courier <unfixed> (embed) [./maildrop]
+ glee
+         - warzone2100 <not-affected> (embed)
+ phing
+         - symfony <unfixed> (embed)
+ pake
+         - symfony <unfixed> (embed)
+ propel
+         - symfony <unfixed> (embed)
+ creole
+         - symfony <unfixed> (embed)
+ hfsutils
+         - cdrkit <unfixed> (embed; bug #570187)
+         NOTE: embeds hfsutils code in genisoimage
+ cdrkit
+         - grub2 <unfixed> (embed; bug #570156)
+         NOTE: genisoimage imported into grub-mkisofs
+ kdebase-workspace
+         - kdebase <unfixed> (old-version)
+ file
+         - php5 <unfixable> (modified-embed)
+         [lenny] - php5 <not-affected>
+ cdb
+         - php5 <unfixed> (embed)
+ libmbfl (itp: #570708)
+         - php5 <unfixed> (embed)
+         NOTE: PHP is actually the current upstream, ITP is of that code
+ libonig
+         - php5 5.3.2-1 (embed)
+ xmlrpc-epi
+         - php5 <unfixed> (embed)
+ swt-gtk
+         - eclipse <unfixed> (embed; bug #538808)
+ txt2html
+         - wml 2.0.11ds2-1 (embed)
+ ca-certificates
+         - nss <not-affected> (certificates are in source, but not included in any of the binary packages)
+ openexr
+         - freeimage <unfixed> (embed)
+ libmng
+         - freeimage <unfixed> (embed)
+ openjpeg
+         - freeimage <unfixed> (embed)
+ libjpeg6b
+         - freeimage <unfixed> (embed)
+ libjpeg (don't know what exact version)
+         - dcmtk <unfixed>
+         - gdcm <unfixed>
+         - insighttoolkit <unfixed>
+         - openarena <unfixed> (bug #495966)
+         - outguess <unfixed>
+         - squeak-vm <unfixed> (embed)
+         - tremulous <unfixed>
+         - tuxonice-userui <unfixed> (static)
+         - fpc <unfixed> (static)
+         - lazarus <unfixed> (static)
+         NOTE: inherited from fpc, see #472304
+         - mseide-msegui <unfixed> (static)
+         NOTE: inherited from fpc, see #472304
+         - easymp3gain <unfixed> (static)
+         NOTE: inherited from fpc, see #472304
+         - winff <unfixed> (static)
+         NOTE: inherited from fpc, see #472304
+         - texlive-bin <not-affected> (included in upstream source as dependency of libgd2, but not built or included in any of the binary packages)
+ lxr
+         - lxr-cvs <unfixed> (embed)
+ libfile-copy-recursive-perl
+         - r-base <unfixed> (embed; bug #577427)
+         - r-base-core-ra <unfixed> (embed; bug #577429)
+ delimmatch
+         - r-base <unfixed> (embed; bug #577433)
+         - r-base-core-ra <unfixed> (embed; bug #577434)
+ libsmf (ITP: #572558)
+         - denemo <unfixed> (embed)
+         NOTE: http://lists.debian.org/debian-mentors/2010/04/msg00269.html
+ libselinux
+         - dpkg 1.15.6 (static)
+ xinha (ITP: #479708)
+         - horde3 <unfixed>
+         - serendipity <unfixed>
+         - openacs <unfixed>
+         - dotlrn <unfixed>
+ dvipng
+         - texlive-bin <not-affected> (code present in source but not included in the binary packages)
+ dvipdfmx
+         - texlive-bin <unfixed> (embed)
+         NOTE: this is intentionally part of the package now, and the separate dvipdfmx package has been removed from sid/squeeze
+ lcdf-typetools
+         - texlive-bin 2009-1 (embed)
+ tex4ht
+         - texlive-bin 2009-1 (embed)
+ freetype
+         - texlive-bin 2009-1 (embed)
+ freetype2
+         - texlive-bin 2009-1 (embed)
+ silgraphite
+         - texlive-bin <unfixed> (embed)
+ unzip
+         - texlive-bin 2009-1 (embed)
+ jbig2dec
+         - ghostscript 8.71~dfsg2-1 (embed)
+ libxml2
+         - chromium-browser 5.0.375.29~r46008-1
+ protobuf
+         - chromium-browser 5.0.375.70~r48679-2
+ libv8
+         - chromium-browser 5.0.375.38~r46659-1
+ nspr
+         - chromium-browser 5.0.375.29~r46008-3
+ yasm
+         - chromium-browser 5.0.375.29~r46008-2
+ libxslt
+         - chromium-browser 5.0.375.29~r46008-1
+ miniupnpc (not packaged in Debian; ITP bug #444392)
+         - warzone2100 <unfixed> (embed)
+ iniparser (not packaged in Debian; RFP bug #582657)
+         - warzone2100 <unfixed> (modified-embed)
+ pyglet
+         - sympy <unfixed> (embed; bug #459716)
+ mpmath
+         - sympy <unfixed> (embed; bug #541746)

 Legend:



Removed from v.13607
 


changed lines


 
Added in v.15152
 Legend:



Removed from v.13607
 


changed lines


 
Added in v.15152
-Removed from v.13607
+Added in v.15152

	ViewVC Help
Powered by ViewVC 1.1.5