/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7203 by white, Sun Nov 4 07:21:06 2007 UTC revision 13766 by geissert, Fri Jan 8 20:59:56 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  cupsys (uses xpdf-utils, it's still present in the src, though)  <srcpkg> (<optional comment about srcpkg>)
10  poppler          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  koffice/kword (upstream is working on using poppler, #436163)          NOTE: optional comments about the linkage of the embedding srcpkg
12  libextractor (uses internal pdf decoder since 0.5.12-1)  
13  pdfkit.framework (links to poppler since 0.8-4)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16  silc-toolkit:          that add real value)
17  silc-client (uses libsilc and libsilcclient)  sort: static (linking statically against a lib)
18          embed (embeds a copy of the library into another source package)
19  dietlibc:        modified-embed (embeds a code copy that differs from upstream code)
20  ccontrol (links statically)        fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22  libiax:  
23  iaxmodem  The srcpkg might be some string to identify the code if there is no
24    specific source package.
25  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
26  dpkg  Everything up to the next line is ignored.
27  rsync (somehow derived code base)  ---BEGIN
28  mono  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  mozilla(?)          NOTE: Fixed packages link to poppler library unless otherwise noted
30  Linux kernels          - pdftohtml <unknown>
31  pvpgn (links dynamically since 1.7.8-2)          [sarge] - pdftohtml <unfixed>
32  mrtg (links dynamically since 2.12.2-1)          [etch] - pdftohtml <unfixed>
33  rpm          NOTE: has been replaced by poppler-utils
34            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35  libbz2:          - texlive-base 3.0-12 (embed)
36  dpkg (statically linked)          - texlive-bin 2007-1 (embed)
37            NOTE: links to poppler
38  libgadu/ekg:          - koffice <unfixed> (embed; bug #436163)
39  centericq          - libextractor 0.5.12-1 (embed)
40  gaim          NOTE: libextractor is using its own pdf decoder now
41  kopete (ships the code, but links dynamically in the Debian package)          - ipe <unfixed> (embed)
42  kadu (not packaged in Debian)          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43  GNU gadu (not yet packaged in Debian)          - ruby-gnome2 <unknown> (embed)
44            NOTE: copy only present in source but links to poppler
45  xmlrpc: (which package is the "origin" of this code?)          - pdfedit <unfixed> (embed; bug #510794)
46  drupal          - swftools <unfixed> (embed; bug #551293)
47  phpgroupware          - poppler <unfixable> (fork)
48  egroupware  
49  phpwiki  ppmd
50  php4 (php-pear, IIRC this was reorganized some weeks ago?)          - libcomplearn-mod-ppmd <unfixed> (fork)
51  tikiwiki          NOTE: discussion in #458152
52    
53  shtool: (affects build-time only)  libevent
54  mysql-ocaml          - transmission 1.71-1 (embed; bug #529372)
55  php4  
56    lrmi
57  mozilla:          - read-edid 2.0.0-1 (embed; bug #495131)
58  mozilla-firefox          - s3switch <unfixed> (embed)
59  mozilla-thunderbird          - xresprobe <unfixed> (embed)
60  firefox (to be removed)          - zhcon <unfixed> (embed)
61  thunderbird (to be removed)  
62  iceweasel  peercast
63  iceape          - gnome-peercast <removed> (embed)
64  icedove          [etch] - gnome-peercast <unfixed> (embed)
65  xulrunner  
66  nvu (no longer in Debian)  silc-toolkit
67            - silc-client 1.1~beta6-1 (embed)
68  xli:  
69  xloadimage  icclib
70            - ghostscript <unfixed> (embed)
71  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)          - argyll <unfixed> (embed)
72  openmotif  
73  xfree86/xorg (in libxpm)  dietlibc
74            - ccontrol 0.9.1+20071204-1 (static)
75  kerberized apps with BSD origin:  
76  krb4  libmikmod
77  krb5          - sdl-mixer1.2 <unfixed> (embed)
78  heimdal          TODO: report bug
79    
80  grip: (which pkg is the origin?)  libiax
81  libcdaudio          - iaxmodem <unfixable> (embed; bug #548885)
82  grip  
83  gnome-vfs (vfs2 as well?)  spandsp
84            - iaxmodem <unfixable> (embed; bug #548885)
85  fudforum:  
86  phpgroupware-fudforum  python-paramiko
87  egroupware-fudforum (removed from egroupware after sarge)          - fabric 0.9.0-2 (embed; bug #561398)
88    
89  cvs:  zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
90  gcvs (at least an additional script is included, check if there's more)          - dpkg <unfixed> (static)
91            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
92  pcre:          - rsync <unfixed> (embed)
93  all pythons          NOTE: somehow derived code base
94  php4 (src included, but Debian package links dynamically)          - mono <unfixed> (embed)
95  analog (src included, but Debian package links dynamically)          TODO: check mozilla
96  libgoffice-1          - Linux kernels <unfixed> (embed)
97  vfu          - pvpgn 1.7.8-2 (embed)
98  tf5 (since 5.0beta7 the Debian package links dynamically)          - mrtg 2.12.2-1 (embed)
99  monotone (including this starting from 0.37)          - rpm <unknown> (embed)
100            NOTE: pinged anibal since when rpm was fixed
101  tiff:          - tuxcmd-modules <unfixed> (embed)
102  wxpythongtk (check, which debian pkg this is in)          - zsync <unfixed>
103  older kdegraphics/kpdf releases < 3.3 embedded a copy          - tra <unfixed>
104            - sash <unfixed>
105  uudeview:          - nsis <unfixed>
106  libconvert-uulib-perl          - mseide-msegui <unfixed>
107            NOTE: mseide
108  sqlite: (not affected by security vulnerabilities so far)          - mirrordir <unfixed>
109  amarok          - poco <unfixed>
110  monotone          - klibc <unfixed>
111            - ghostscript <unfixed>
112  util-linux/mount:          - freeimage <unfixed>
113  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          - clamav <unfixed> (fork)
114            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
115  webmin:          - tuxonice-userui <unfixed>
116  usermin (only in sarge)          - plt-scheme <unfixed>
117            - perl <unfixed>
118  sylpheed:          - paraview <unfixed>
119  sylpheed-claws          - gcvs <unfixed>
120            - dump <unfixed>
121            - aide <unfixed> (static)
122            - dar <unfixed> (static)
123            - avfs <unfixed>
124            - fpc <unfixed>
125            - winff <unfixed>
126            NOTE: inherited from fpc, see #472304
127            - lazarus <unfixed>
128            NOTE: inherited from fpc, see #472304
129            - erlang <unfixed> (embed)
130            - gamera 3.2.3-1 (embed)
131            - python2.4 <unfixed> (embed; bug #553403)
132            - python2.5 <unfixed> (embed; bug #553403)
133    
134    dulwich
135            - hg-git 0.1.0-1 (embed; bug #541996)
136    
137    libvigraimpex
138            - hugin <unfixed> (embed; bug #542259)
139            - enblend-enfuse <unfixed> (embed; bug #542258)
140            - gamera 3.2.3-1 (embed)
141    
142    libbz2
143            - dpkg <unfixed> (static)
144    
145    libgadu
146            - centerim <unfixed> (embed; bug #559783)
147            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
148            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
149            - kdenetwork 4:3.3.2-5 (embed)
150            NOTE: from kdenetwork: kopete
151            - ekg 1:1.8~rc0-1 (embed)
152            - kadu 0.6.0.2-3 (embed; bug #504430)
153            - gadu <itp> (embed)
154    
155    xmlrpc (which package is the "origin" of this code?)
156            - drupal <unfixed> (embed)
157            - phpgroupware <unfixed> (embed)
158            - egroupware <unfixed> (embed)
159            - phpwiki <unfixed> (embed)
160            - php4 <unfixed> (embed)
161            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
162    
163    shtool (affects build-time only)
164            - mysql-ocaml <unfixed> (embed)
165            - php4 <unfixed> (embed)
166    
167  phpsysinfo:  xulrunner
168  egroupware          - iceape <unfixed> (embed; bug #561749)
169  phpgroupware          - iceweasel 2.0.0.19 (embed)
170            - icedove <unfixed> (embed; bug #561750)
171  phpldapadmin:          - kompozer <unfixed> (embed; bug #532168)
172  egroupware (removed from egroupware after sarge)          - galeon 2.0.2-4 (embed)
173            - epiphany-browser 2.14.3-8 (embed)
174  chmlib:          - conkeror 0.9~git080629-2 (embed)
175  kchmviewer (not packaged in Debian)          - kazehakase 0.4.2-1 (embed)
176    
177  libavcodec/libavformat:  xli
178  ffmpeg          - xloadimage <unfixed> (embed)
179  xine-lib  
180  xvidcap  lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
181  kino (links statically, does not include code)          - openmotif <unfixed> (embed)
182  vlc (links statically, does not include code)          - libxpm <unfixed> (embed)
183  smilutils (links statically, does not include code)  
184  motion (links statically, does not include code)  kerberized apps with BSD origin
185  gst-ffmpeg          - krb4 <removed> (embed)
186  gstreamer0.10-ffmpeg          - krb5 <unfixed> (embed)
187  xmovie          - heimdal <unfixed> (embed)
188    
189  mad MPEG decoding lib:  grip (which pkg is the origin?)
190  mad          - libcdaudio <unfixed>
191  xine-lib          - grip <unfixed>
192            - gnome-vfs <unfixed>
193            TODO: check vfs2 as well
194    
195    fudforum
196            [etch] - phpgroupware <unfixed> (embed)
197            NOTE: phpgroupware-fudforum
198            [sarge] - egroupware-fudforum <removed> (embed)
199    
200    libbsd
201            - rdate 1:1.2-3 (embed)
202            - atheme-services <unfixed>
203            - libbsd-arc4random-perl <unfixed>
204            - isakmpd <unfixed>
205            - bsdgames <unfixed> (embed)
206            - bsd-mailx <unfixed> (embed)
207            - netcat-openbsd <unfixed> (embed; bug #550611)
208            - openssh <unfixed> (embed)
209            - unworkable <unfixed> (embed)
210    
211    cvs
212            - gcvs <unfixed> (embed)
213            NOTE: see cvsunix/src in tarball
214    
215    pcre3
216            - php4 <unknown> (embed)
217            - analog 2:5.23-0woody1 (embed)
218            - goffice <unfixed> (embed)
219            NOTE: libgoffice-*
220            - vfu 4.06-4.1 (embed; bug #450754)
221            - tf5 5.0beta7-1 (embed)
222            - monotone 0.43-1 (embed)
223            NOTE: this only affects versions >= 0.37
224            - glib2.0 2.15.2-1 (embed)
225            - apache2 2.0.53-4 (embed)
226            - exim4 4.10-0.srh20.12 (embed)
227            - yacas <unfixed> (embed)
228            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
229            - gtamsanalyzer.app 0.42-5 (embed)
230            - tin 980117-1 (embed)
231            - kazehakase 0.5.2-1
232            - webkit 1.0.1-1 (embed)
233            - qt4-x11 <unfixed> (embed)
234            NOTE: embedded via webkit copy
235            - erlang <unfixed> (embed)
236            - ssed <unfixed> (embed)
237    
238    tiff
239            - wxwindows2.4 2.2.1 (embed)
240            - gamera 3.2.3-1 (embed)
241    
242    uudeview
243            - libconvert-uulib-perl <unfixed> (embed)
244            - pan <unfixed> (embed)
245    
246    sqlite (not affected by security vulnerabilities so far)
247            - amarok <unfixed> (embed)
248            - monotone 0.43-1 (embed)
249            - iceweasel <unfixed> (embed)
250            - heimdal <unfixed> (embed; bug #559616)
251    
252    util-linux/mount
253            - loop-aes-utils <unfixed> (embed)
254            NOTE: contains code from util-linux' mount in the mount-aes-udeb
255    
256    sylpheed
257            - sylpheed-claws <unfixed> (fork)
258    
259    phpsysinfo
260            - egroupware <unfixed> (embed)
261            - phpgroupware <unfixed> (embed)
262    
263    phpldapadmin
264            [sarge] - egroupware <unfixed> (embed)
265            NOTE: removed from egroupware after sarge
266    
267    chmlib
268            - kchmviewer <unknown> (embed)
269    
270    ffmpeg (libavcodec/libavformat)
271            - mplayer 1.0~rc2-14 (embed; bug #395252)
272            - kino 1.0.0-1
273            - vlc <not-affected> (Links dynamically since initial release)
274            - smilutils 0.3.0-10
275            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
276            - motion 3.1.19-1
277            - gstreamer0.10-ffmpeg 0.10.3-2
278            - xmovie <removed> (static)
279            TODO: gimp-gap (potentially using ffmpeg code as well)
280            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
281            - audacity 1.3.7-2 (embed; bug #512278)
282    
283    faad2
284            - mplayer 1.0~rc2-20 (embed)
285            - avifile <unfixed> (embed; bug #538750)
286            - ffmpeg-debian <removed> (old-version)
287    
288    libmad (MPEG decoding lib)
289            - xine-lib <unfixed> (embed)
290            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
291            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
292    
 libdts:  
293  libdts  libdts
294  xine-lib          - xine-lib <unfixed> (embed)
295    
 flac:  
296  flac  flac
297  xine-lib          - xine-lib <unfixed> (embed)
   
 liba52:  
 a52dec  
 xine-lib  
   
 libmpeg2:  
 mpeg2dec  
 xine-lib  
   
 curl:  
 wget (code for NTLM authentication)  
   
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
298    
299  uw-imap:  liba52
300  pine          - a52dec <unfixed> (embed)
301  alpine          - xine-lib <unfixed> (embed)
302    
303    libmpeg2
304            - mpeg2dec <unfixed> (embed)
305            - xine-lib <unfixed> (embed)
306    
307    libntlm
308            - wget <unfixed> (fork; bug #550436)
309            - curl <unfixed> (fork; bug #550437)
310            - cntlm <unfixed> (fork; bug #550438)
311    
312    uw-imap
313            - pine <unfixed> (embed)
314            - alpine <unfixed> (embed)
315    
316    imagemagick
317            - graphicsmagick <unfixed> (fork)
318    
319    python-urlgrabber
320            - mercurial <unfixed> (embed; bug #531062)
321            - w3af <unfixed> (embed; bug #555372)
322            [experimental] - harvestman <unfixed> (embed; bug #555373)
323    
324    beautifulsoup
325            - python-mechanize <unfixed> (embed; bug #555349)
326            - zope2.11 <unfixed> (embed; bug #555350)
327            - twill <unknown> (embed)
328    
329    halibut
330            - nsis <unfixed> (fork)
331    
332    libghttp
333            - hotway <unfixed> (embed)
334    
335    libsndfile
336            - ardour 1:2.7.1-1 (embed)
337    
338    glibmm2.4
339            - ardour 1:2.7.1-1 (embed)
340    
341    libgnomecanvasmm2.6
342            - ardour 1:2.7.1-1 (embed)
343    
344    libsigc++-2.0
345            - ardour 1:2.7.1-1 (embed)
346    
347    soundtouch
348            - ardour 1:2.7.1-1 (embed)
349    
350    libmms
351            - xine-lib <unfixed> (embed)
352            - mimms <unfixed> (embed)
353    
354    fckeditor
355            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
356            - moin 1.8.2-2 (embed; bug #452599)
357            - karrigell <removed> (embed; bug #452598)
358            - gforge 4.6.99+svn6225-1 (embed)
359            - request-tracker3.8 <unfixed> (embed)
360            - otrs2 <unfixed> (embed)
361    
362    ipatlas (not packaged in Debian)
363            - moodle <unfixed> (embed; bug #507185)
364    
365    libphp-phpmailer
366            - moodle <unfixed> (embed; bug #507185)
367            - mahara <unfixed> (embed)
368            - symfony <unfixed> (embed)
369            [etch] - phpgroupware <unfixed> (embed)
370            NOTE: phpgroupware-felamimail is only in etch
371            - egroupware <unfixed> (embed; bug #504283)
372            - glpi <unfixed>
373    
374    htmlArea (not packaged in Debian)
375            - moodle <unfixed> (embed)
376    
377    giflib
378            - wine <unfixed> (embed; bug #466181)
379    
380    bennu (not packaged in Debian, http://bennu.sourceforge.net)
381            - moodle <unfixed> (embed)
382    
383    smarty
384            - moodle 1.8.2-2 (embed; bug #471158)
385            - gallery2 2.2.5-2 (embed; bug #471160)
386            - mahara 0.9.2-2 (embed; bug #471201)
387            - gosa 2.4beta1-1 (embed; bug #471200)
388    
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
   
 libghttp:  
 hotway  
   
 libsndfile:  
 ardour  
   
 glibmm2.4:  
 ardour  
   
 libgnomecanvasmm2.6:  
 ardour  
   
 libsigc++-2.0:  
 ardour  
   
 soundtouch:  
 ardour  
   
 libmms:  
 xine-lib  
 mimms  
   
 FCKeditor:  
 knowledgeroot  
 moin  
 karrigell  
 gforge-plugins-extra  
   
 Moodle contains lots of things:  
 AdoDB  
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
389  TinyMCE  TinyMCE
390  bennu          - wordpress 2.5.1-3 (embed; bug #478257)
391            - moodle <unfixed> (embed; bug #507185)
392  TinyMCE:          - knowledgeroot <unfixed> (embed)
393  wordpress          - joomla <itp> (bug #326398)
394  moodle  
395  knowledgeroot  scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
396  joomla (ITP)          - scite <unfixed> (embed)
397            - qscintilla <unfixed> (embed)
398  scintilla:          - qscintilla2 <unfixed> (embed)
399  scite          - geany <unfixed> (fork)
400  qscintilla          - anjuta <unfixed> (embed)
401  qscintilla2  
402  geany  libphp-adodb
403            - moodle <unfixed> (embed; bug #507185)
404  libphp-adodb:          NOTE: also AdoDB-XML Schema
405  gallery2          - gallery2 <unfixed> (embed)
406  phppgadmin          - phppgadmin <unfixed> (embed)
407  egroupware          - egroupware <unfixed> (embed)
408  phpwiki          - phpwiki <unfixed> (embed)
409  moodle          - torrentflux 2.0beta1-2 (embed)
410  cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)          - ipplan <unfixed> (embed)
411            - typo3-src <unfixed> (embed)
412  gzip:          - cacti <unknown> (embed)
413  linux-kernel (lib/inflate.c)          [sarge] - cacti <unfixed> (embed)
414  klibc (based on linux-kernel gzip code)          NOTE: dependency exists, but internal version is used
415  busybox          - gforge 4.7~rc2-6 (embed)
416            - mahara <unfixed> (embed)
417    
418    gzip
419            - linux-kernel <unfixed> (embed)
420            NOTE: lib/inflate.c
421            - klibc <unfixed> (embed)
422            NOTE: based on linux-kernel gzip code
423            - busybox <unfixed> (embed)
424    
425    neon
426            - cadaver 0.22.3+debian-1 (embed; bug #188381)
427            - gnome-vfs2 <unfixed> (embed; bug #395874)
428            [etch] - litmus <unfixed> (embed; #395875)
429            - litmus <removed> (embed; #395875)
430            [sarge] - screem <unfixed> (embed)
431            - sitecopy 1:0.16.0-1 (embed; bug #395876)
432            [etch] - tla <unfixed> (embed; bug #395877)
433            [sarge] - tla <unfixed> (embed; bug #395877)
434    
435    libmodplug
436            - gst-plugins-bad0.10 <unfixed> (embed)
437    
438    libvncserver
439            - vino <unfixed> (embed)
440    
441    putty
442            - filezilla <unfixed> (embed)
443    
444    tinyxml (not packaged in Debian; itp bug #531968)
445            - filezilla <unfixed>
446            - crystalspace <unfixed> (embed)
447            - libwfut <unfixed> (embed)
448            - rarian <unfixed> (embed)
449            - bulletml <unfixed> (embed)
450            - pokerth <unfixed> (embed)
451            - qutecom <unfixed> (embed)
452            - sofa-framework <unfixed> (embed)
453            - yate <unfixed> (embed)
454            - antigrav <unfixed> (embed)
455            - balder2d <unfixed> (embed)
456            - cal3d <unfixed> (embed)
457            - criticalmass <unfixed> (embed)
458            - ember <unfixed> (embed)
459            - epiphany <unfixed> (embed)
460            - gambit <unfixed> (embed)
461            - noiz2sa <unfixed> (embed)
462            - ogre <unfixed> (embed)
463            - opencity <unfixed> (embed)
464            - openmovieeditor <unfixed> (embed)
465            - pouetchess <unfixed> (embed)
466            - tecnoballz <unfixed> (embed)
467            - trigger-rally <unfixed> (embed)
468            - xmoto <unfixed> (embed)
469            - mapnik <unknown> (embed)
470            NOTE: uses a different XML parser by default
471            - rrootage 0.23a-6 <embed>
472            NOTE: links to libbulltetml
473            - boson <unknown> (embed)
474            NOTE: the embedded code is unused
475    
476    gv
477            - evince <unfixed> (embed)
478            NOTE: ps/ tree from gv 3.5.8
479            NOTE: evince-gtk is affected (a component of evince source package)
480    
481    libXbae
482            - paw <removed> (embed)
483            [etch] - paw <unfixed> (embed)
484    
485    libgtkhtml
486            - claws-mail-extra-plugins <unfixed> (fork)
487    
488    libXaw
489            - paw <removed> (embed)
490            [etch] - paw <unfixed> (embed)
491            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
492    
493    libgd2
494            - graphviz <unfixed> (embed)
495            NOTE: lib/gd seems to be 2.0.33
496            - wml <unfixed> (embed)
497            - libwmf <unfixed> (embed)
498            NOTE: derived from gd 1.6.3
499    
500    rar
501            - unrar-nonfree <unfixed> (embed)
502    
503    unrar-free (maybe this code is derived from the original rar, too?)
504            - clamav <unfixed> (embed)
505            NOTE: seems to be disabled in default config
506    
507    mplayer (DirectMedia Object loader)
508            - xine-lib <unfixed> (embed)
509            NOTE: src/libw32dll/
510            - vlc <unfixed> (embed)
511            NOTE: modules/codec/dmo/
512            - mplayer 1.0~rc2-20 (embed)
513    
514    libwpd (WordPerfect converter)
515            - openoffice.org <unfixed> (embed)
516    
517    fsplib (http://sourceforge.net/projects/fsp/)
518            - gftp <unfixed> (embed)
519            NOTE: lib/fsplib version 0.3
520    
521    sprng
522            - tree-puzzle <unfixed> (embed)
523    
524    librpcsecgss
525            - krb5 <unfixed> (embed)
526    
527    jasper
528            - ghostscript 8.64~dfsg-2 (embed)
529    
530    libiris
531            - psi <unfixed> (embed)
532            - kdenetwork <unfixed> (embed)
533            NOTE: kopete embeds libiris but links dynamically to libidn
534            - kdegames <unfixed> (embed)
535            NOTE: ksirk/kde4
536    
537    libidn
538            - monotone 0.43-1 (embed)
539            - psi <unfixed> (embed)
540            NOTE: psi embeds libiris which embeds libidn
541            - kdegames <unfixed> (embed)
542            NOTE: kdegames/kde4 embeds libiris which embeds libidn
543    
544    lua5.1
545            - monotone 0.43-1 (embed)
546            - nmap 5.00-1 (embed; bug #527997)
547            [lenny] - nmap <unfixed> (embed; bug #527997)
548            - ocropus <unfixed> (embed)
549            - enigma <unfixed> (embed)
550            NOTE: requires lua built with C++
551            - freeciv <unfixed> (embed)
552            - spring <unfixed> (embed)
553    
554    libbotan
555            - monotone 0.43-1 (embed)
556    
557    NetXX
558            - monotone 0.43-1 (embed)
559    
560    libgc
561            - mono <unfixed> (embed)
562    
563    lzma
564            - p7zip <unfixed> (embed)
565            - xz-utils <unfixed> (fork)
566    
567    lzo
568            - grub2 <unfixed> (embed)
569    
570    yassl
571            - mysql-dfsg-5.0 <unfixed> (embed)
572    
573    pax code
574            - tar <unfixed> (embed)
575            - cpio <unfixed> (embed)
576    
577    t1lib
578            - tetex-bin 2.0.2-1 (embed)
579            - texlive-bin <unknown> (embed)
580    
581    guichan
582            - boswars <unfixed> (embed)
583            NOTE: maintainer notified us, working on it
584    
585    tolua
586            - boswars <unfixed> (embed)
587            NOTE: maintainer notified us, working on it
588            NOTE: actually tolua++
589            - ocropus <unfixed> (embed)
590            NOTE: actually tolua++
591            - freeciv <unfixed> (embed)
592            NOTE: actually tolua++
593            - enigma <unfixed> (embed)
594    
595  ffmpeg:  asio-dev
596  mplayer (#395252)          - luxrender <removed> (embed)
597    
598  neon:  xine-lib
599  cadaver (all, but being worked on: #188381)          - vlc <unfixed> (embed)
600  gnome-vfs2 (#395874)          NOTE: only parts included in modules/access/rtsp
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
   
 libmodplug:  
 gst-plugins-bad0.10  
   
 libvncserver:  
 vino  
   
 putty:  
 filezilla  
   
 tinyxml (not packaged in Debian):  
 filezilla  
   
 gv:  
 evince (ps/ tree from gv 3.5.8)  
 evince-gtk (not packaged in Debian)  
   
 libXbae:  
 libpawlib2-lesstif package (from Cernlib)  
601    
602  libXaw:  netpbm
603  libpawlib2-lesstif package (from Cernlib)          - tcl8.3 <unfixed> (embed)
604            - tcl8.4 <unfixed> (embed)
605            - tcl8.5 <unfixed> (embed)
606            NOTE: generic/tkImgGIF.c
607    
608    tk8.5
609            - tk8.0 <removed> (old-version)
610            - tk8.3 <unfixed> (old-version)
611            - tk8.4 <unfixed> (old-version)
612            - perl-tk <unfixable> (fork)
613    
614    samba
615            - mc 2:4.6.2~git20080311-1 (embed)
616            NOTE: maintainer is aware of this, currently searching a solution
617    
618    plib1.8.4c2
619            - boson <unfixed> (fork)
620            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
621    
622    fribidi
623            - quesoglc <unfixed> (embed)
624            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
625    
626    glew
627            - quesoglc <unfixed> (embed; bug #489341)
628            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
629            - trigger <unfixed> (embed)
630            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
631            - trigger-rally <unfixed> (embed)
632            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
633    
634    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
635            - transcend <unfixed> (embed)
636            - cultivation <unfixed> (embed)
637            - passage <unfixed> (embed)
638            - gravitation <unfixed> (embed)
639    
640  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  tar
641            - libarchive <unfixed> (embed)
642            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
643    
644  libgd2:  cpio
645  graphviz (lib/gd seems to be 2.0.33)          - libarchive <unfixed> (embed)
646            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
647    
648  rar:  kdelibs
649  unrar-nonfree          - webkit <unfixable> (fork)
650            NOTE: khtml
651    
652    kde4libs
653            - kdelibs <unfixable> (old-version)
654    
655    webkit
656            - qt4-x11 <unfixed> (embed; bug #479851)
657            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
658            [lenny] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
659    
660    ftgl
661            - blender 2.46+dfsg-1 (embed)
662    
663    wv
664            - abiword <unfixed>
665    
666    qemu
667            - kvm <unfixed> (embed; bug #543159)
668            NOTE: the kvm package will be removed from sid and squeeze soon (after
669            NOTE: which it will only be in experimental). superceded by qemu-kvm.
670            - qemu-kvm <unfixed> (embed; bug #560853)
671            - xen-3 3.4.2-2 (embed; bug #560856)
672            - xen-unstable <unfixed> (embed; bug #560856)
673    
674    vgabios
675            - kvm <unfixed> (embed; bug #489442)
676    
677    bochs
678            - kvm <unfixed> (embed; bug #489442)
679    
680    speex
681            - vorbis-tools <unfixed> (embed)
682            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
683            - gst-plugins-good0.10 <unfixed> (embed)
684            - xine-lib <unfixed> (embed)
685            - libfishsound <unfixed> (embed)
686            - libannodex <removed> (embed)
687            - vlc <unfixed> (embed)
688            - xmms-speex <unfixed> (embed)
689            - libsdl-sound1.2 <unfixed> (embed)
690            - sweep <unfixed> (embed)
691    
692    libreadline
693            - magic <itp> (old-version)
694    
695    opcode
696            - ode <unfixed> (embed)
697            NOTE: opcode is not a package in debian, it is just embedded
698            NOTE: http://www.codercorner.com/Opcode.htm
699    
700    gimpact
701            - ode <unfixed> (embed)
702            NOTE: gimpact is not a package in debian, it is just embedded
703            NOTE: http://gimpact.sf.net
704    
705    mochikit
706            - mahara <unfixed> (embed)
707            NOTE: they require extra patches, still unmerged upstream
708            - ntop <unfixed> (embed)
709            - coherence 0.6.2-1 (embed)
710            - paste <unfixed> (embed)
711            - turbogears <unfixed> (embed)
712            - plone3 <unfixed> (embed)
713            - xulrunner <unfixed> (embed)
714            - libjifty-plugin-chart-perl <unfixed> (embed)
715            - sabnzbdplus <unfixed> (embed)
716            - tgmochikit <unfixed> (embed)
717    
718    prototypejs
719            - netbeans-ide 6.0.1+dfsg-2 (embed)
720            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
721            - webcit <unfixed> (embed; bug #555219)
722            - asterisk 1:1.6.2.0~rc3-1 (embed)
723            - libjson-ruby 1.1.4-1 (embed; bug #555224)
724            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
725            - horde3 <unfixed> (embed)
726            - knowledgeroot <unfixed> (embed; bug #555230)
727            - mediatomb <unfixed> (embed; bug #555233)
728            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
729            - ebug-http <removed> (embed; bug #555236)
730            - libaws 2.7-1 (embed; bug #555222)
731            - phpgedview <removed> (embed)
732            - poker-network <removed> (embed; bug #555238)
733            - rails 2.1.0-6 (embed)
734            - wordpress 2.5.0-2 (embed; bug #555243)
735            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
736            TODO: search through all of the other zope packages
737            - ampache 3.4.1-2 (embed)
738            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
739            - hobix 0.5~svn20070319-4 (embed; bug #555247)
740            - zabbix 1.6.6-4 (embed; bug #555250)
741            - chora2 <unfixed> (embed; bug #555253)
742            - gollem <unfixed> (embed; bug # 555254)
743            - jscropperui 1.2.1-1 (embed; bug #555257)
744            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
745            - ingo1 <unfixed> (embed; bug #555261)
746            - kronolith2 <unfixed> (embed; bug #555262)
747            - activeldap <unfixed> (embed)
748            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
749            - mantis <unfixed> (embed; bug #555265)
750            - otrs2 2.3.4-6 (embed; bug #555267)
751            - webcalendar <unfixed> (embed; bug #555269)
752            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
753            - jifty 0.90519-1 (embed; bug #555271)
754            - jquery <unfixed> (embed; bug #555272)
755            - passenger 2.2.5debian1-1 (embed; bug #555273)
756            - plone3 <unfixed> (embed; bug #555275)
757            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
758            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
759            - xulrunner <unfixed> (embed)
760            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
761    
762    gdb
763            - insight <unfixed> (embed)
764    
765    e2fsprogs
766            - ldiskfsprogs <unfixable> (fork)
767    
768    quazip (not packaged in Debian)
769            - qcake <unfixed> (embed)
770            NOTE: starting with upstream version 0.6.4
771    
772    exo
773            - pcmanfm <unfixed> (embed; bug #499677)
774            NOTE: slightly modified source code
775    
776    java
777            - openjdk-6 <unfixed>
778            - sun-java5 <unfixed>
779            - sun-java6 <unfixed>
780    
781    libphp-snoopy
782            - ampache 3.4.1-2 (embed; bug #504169)
783            - gforge 4.6.99+svn6094-2 (embed)
784            - mahara 1.0.5-2 (embed; bug #504170)
785            - pixelpost 1.7.1-5 (embed; bug #504171)
786            - mediamate 0.9.3.6-5 (embed; bug #504172)
787            - opendb <removed> (embed; bug #504173)
788            [etch] - opendb <unfixed> (embed; bug #504173)
789            - wordpress 2.5.1-9 (embed; bug #443948)
790            - moodle <unfixed> (embed; bug #507185)
791            [etch] - phpgroupware <unfixed> (embed)
792            NOTE: phpgroupware-felamimail
793            - magpierss 0.72-3 (embed; bug #431089)
794    
795    jquery
796            - zekr <unfixed> (embed)
797            - wordpress <unknown> (embed)
798            - yocto-reader <unfixed> (embed)
799            - textpattern <unfixed> (embed)
800            - genshi 0.5.1-1 (embed)
801            NOTE: compressed file under examples/ dir
802            - prewikka <unfixed> (embed)
803            - libramaze-ruby <unfixed> (embed)
804            - drupal5 <unfixed> (embed)
805            - b2evolution <unfixed> (embed)
806            - wesnoth <unfixed> (embed)
807    
808    tablesorter (jquery plugin, not packaged yet)
809            - wesnoth <unfixed> (embed)
810    
811    kses
812            - wordpress <unfixed> (embed; bug #504242)
813            NOTE: their copy has all methods renamed to wp_<foo>
814            NOTE: kses isn't in Debian, RFP: #504240
815            - moodle <unfixed> (embed; bug #507185)
816            - egroupware <unfixed> (embed)
817    
818    magpierss
819            - wordpress <unfixed> (embed; bug #504242)
820            - moodle <unfixed>
821    
822    php-gettext
823            - wordpress 2.8.4-1 (embed; bug #504242)
824            - docbookwiki <unfixed> (embed)
825            NOTE: non-free
826    
827    libphp-ixr (name may change, it is the Incutio XML-RPC)
828            - wordpress <unfixed> (embed; bug #504242)
829            NOTE: libphp-ixr isn't in Debian, RFP: #504236
830            - dokuwiki <unfixed> (embed)
831            - textpattern <unfixed> (embed)
832    
833    libphp-cas
834            - glpi <unfixed> (embed)
835            - moodle <unfixed> (embed; bug #505984)
836    
837    scriptaculous (prototype.js is among the embeds in the following)
838            - glpi <unfixed> (embed)
839            - libaws <unfixed> (embed; bug #555222)
840            - op-panel <unfixed> (embed)
841            - symfony <unfixed> (embed)
842            NOTE: maintainer says there are extra incompatible changes required
843            - pixelpost 1.7.1-6 (embed)
844            - webhelpers <unfixed> (embed)
845            - qwik <removed> (embed; bug #555241)
846            - smokeping <unfixed> (embed)
847            - turba2 <unfixed> (embed)
848            - typo3-src 4.2.3-1 (embed)
849            - request-tracker3.6 <unfixed> (embed)
850            - request-tracker3.8 <unfixed> (embed)
851            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
852            - wordpress 2.5.0-2 (embed)
853            - libhtml-prototype-perl 1.48-3 (embed)
854    
855    libmarkdown-php
856            - moodle <unfixed> (embed; bug #507185)
857            - pixelpost 1.7.1-6 (embed)
858    
859    php-openid
860            - wordpress-openid <itp> (embed)
861    
862    geshi
863            - dokuwiki 0.0.20080505-3.1 (embed)
864            - pgfouine 1.0-1.1 (embed)
865            - websvn 2.1.0-1 (embed)
866    
867    webcalendar
868            - gforge 4.7~rc2-6 (embed; bug #504758)
869    
870    libical
871            - kdepim <unknown> (fork)
872            NOTE: fixed at some point during 4.0
873            - kdepimlibs 4.2.0-1 (fork)
874            - claws-mail-extra-plugins <unfixed> (fork)
875    
876    libltdl3
877            - kdelibs <unfixed> (embed)
878            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
879            - synfig <unfixed> (embed)
880    
881    harfbuzz
882            - qt4-x11 <unfixed> (embed)
883            - pango1.0 <unfixed> (embed)
884            - fontmatrix <unfixed> (embed)
885    
886    libzip
887            - php5 <unfixable> (modified-embed)
888            - odt2txt <unfixed> (embed; bug #523808)
889    
890    json.php (not packaged; should be replaced with php's built-in functions)
891            - moodle <unfixed>
892            - yui <unfixed>
893            - gallery2 <unfixed>
894            - dokuwiki <unfixed>
895            - typo3-src <unfixed>
896    
897    php-fpdf
898            - tcpdf <itp> (fork)
899            - moodle <unfixed>
900            - phpwiki <unfixed>
901            - egroupware <unfixed>
902            - ldap-account-manager <unfixed> (fork)
903    
904    tcpdf (itp: #495985)
905            - moodle <unfixed>
906            - phpmyadmin <unfixed>
907    
908    typo3
909            - moodle <unfixed>
910    
911    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
912            - moodle <unfixed>
913            - gosa <unfixed>
914    
915    php-ole (itp: #487558)
916            - moodle <unfixed>
917    
918    pieforms (http://www.catalyst.net.nz)
919            - mahara <unfixed>
920    
921    savant2 (http://phpsavant.com)
922            - egroupware <unfixed>
923    
924    rssparser (http://nwow.org)
925            - egroupware <unfixed>
926            - phpgroupware <unfixed>
927    
928    lcms
929            - openjdk-6 <unfixed> (fork)
930    
931    libphp-phplayersmenu
932            - diogenes <unfixed>
933            - phpldapadmin <unfixed>
934    
935    libphp-pclzip
936            - docvert <unfixed>
937            - moodle <unfixed>
938            - egroupware <unfixed>
939    
940    libphp-simplepie
941            - dokuwiki <unfixed>
942            - wordpress <unfixed>
943    
944    libphp-jpgraph
945            - egroupware <unfixed>
946    
947    php-simpletest
948            - moodle <unfixed>
949    
950    libpng
951            - iceweasel <not-affected> (uses xulrunner)
952            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
953            - iceape 1.0.13~pre080614i-0etch1 (embed)
954            - xulrunner 1.9.0.13-1 (embed)
955            [lenny] - xulrunner 1.9.0.11-0lenny1
956            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
957            - gamera 3.2.3-1 (embed)
958    
959    irssi
960            - silc-client <unfixed> (embed)
961            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
962    
963    extc
964            - mtasc <unfixed> (embed)
965            - haxe <unfixed> (embed)
966    
967    swflib
968            - mtasc <unfixed> (embed)
969            - haxe <unfixed> (embed)
970    
971    libitext-java
972            - bouncycastle 2.1.4-1 (embed)
973    
974    python-ply
975            - pyke <unfixed> (embed; bug #555363)
976            - pywbem 0.7.0-4 (embed; bug #555364)
977            - sepolgen <unfixed> (embed; bug #555365)
978            - zope-textindexng3 <unknown> (embed)
979            - iceweasel <not-affected> (uses xulrunner)
980            - xulrunner <unknown> (embed)
981            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
982    
983    libdumbnet (libdnet upstream)
984            - nmap <unfixed> (fork)
985    
986    gcc-4.4
987            - gcc-mingw32 <unfixed> (embed)
988    
989    camlimages
990            - advi <unfixed> (static; bug #550441)
991    
992    memcached
993            - memcachedb <unfixed> (embed)
994    
995    yajl
996            - argyll <unfixed> (embed; bug #544223)
997            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
998    
999    nusoap
1000            - gforge 4.8.2-1 (embed)
1001            - ampache <unfixed> (embed)
1002            - poker-network <unfixed> (old-version)
1003            - moodle <unfixed> (old-version)
1004            NOTE: code is not used when running under php5 and soap is enabled
1005            - phpwiki <unfixed> (old-version)
1006            - gallery2 <unfixed> (old-version)
1007            - typo3-src <unfixed> (old-version)
1008    
1009    libept
1010            - adept <unfixed> (embed; bug #540649)
1011    
1012    libvorbis
1013            - iceweasel <not-affected> (uses xulrunner)
1014            - xulrunner <unfixed> (embed; bug #540959)
1015            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1016            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1017            - iceape <unfixed> (embed)
1018            [etch] - iceape <not-affected> (introduced in 2.0)
1019            [lenny] - iceape <not-affected> (introduced in 2.0)
1020    
1021    cairo
1022            - iceweasel <not-affected> (uses xulrunner)
1023            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1024    
1025    liboggz
1026            - iceweasel <not-affected> (uses xulrunner)
1027            - xulrunner <unfixed> (embed; bug #540959)
1028            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1029            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1030            - iceape <unfixed> (embed)
1031            [etch] - iceape <not-affected> (introduced in 2.0)
1032            [lenny] - iceape <not-affected> (introduced in 2.0)
1033    
1034    liboggplay
1035            - iceweasel <not-affected> (uses xulrunner)
1036            - xulrunner <unfixed> (embed; bug #540959)
1037            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1038            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1039            - iceape <unfixed> (embed)
1040            [etch] - iceape <not-affected> (introduced in 2.0)
1041            [lenny] - iceape <not-affected> (introduced in 2.0)
1042    
1043    php-net-dnsbl
1044            - serendipity <unfixed> (embed; bug #541740)
1045    
1046    php-onyx-rss
1047            - serendipity <unfixed> (embed; bug #541740)
1048    
1049    php-text-wiki
1050            - serendipity <unfixed> (embed; bug #541740)
1051    
1052    php-xml-rpc
1053            - serendipity <unfixed> (embed; bug #541740)
1054    
1055    polarssl (does not have a shared library)
1056            - pdkim <itp> (embed; bug #543150)
1057            - xyssl <unfixed> (old-version)
1058    
1059    pidgin
1060            - gaim <removed> (old-version)
1061            - qutecom <unfixed> (embed; bug #559785)
1062    
1063    icu
1064            - webkit 1.0.1-1 (embed; bug #547214)
1065            - texlive-bin <unfixed> (fork)
1066            NOTE: texlive upstream working with icu upstream to merge their changes
1067    
1068    cyrus-imapd-2.2
1069            - kolab-cyrus-imapd <unfixed> (fork)
1070            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1071    
1072    python-cxx-dev
1073            - freecad 0.9.2646.3-1 (embed; bug #547936)
1074    
1075    zipios++
1076            - freecad 0.9.2646.3-1 (embed; bug #547941)
1077            - enigma 0.92.3-3 (embed)
1078            NOTE: likely fixed earlier, marking etch's version as fixed
1079    
1080    linux-2.6
1081            - kvm <removed> (embed; bug #549973) [./kernel/*]
1082            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1083            - kernel-source-2.6.8 <removed> (old-version)
1084            - kernel-source-2.4.27 <removed> (old-version)
1085            - kernel-source-2.4.24 <removed> (old-version)
1086            - kernel-source-2.2.25 <removed> (old-version)
1087            - kernel-source-2.2.20 <removed> (old-version)
1088    
1089    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1090            - kvm <removed> (embed) [./libfdt/*]
1091            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1092    
1093    qweb (not packaged)
1094            - ajaxterm <unfixed>
1095    
1096    opensaml2
1097            - opensaml <removed> (old-version)
1098    
1099    shibboleth-sp2
1100            - shibboleth-sp <removed> (old-version)
1101    
1102    tuxonice-userui
1103            - suspend2-userui <removed> (old-version)
1104    
1105    expat
1106            - w3c-libwww <removed> (embed; bug #551941)
1107            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1108            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1109            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1110            - python2.4 <unfixable> (embed; bug #553403)
1111            - python-4suite <unfixed> (embed; bug #516935)
1112            - wxwindows2.4 <removed> (embed)
1113            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1114            - wxwidgets2.8 2.8.10.1-2 (embed)
1115            - celementtree 1.0.5-8 (embed)
1116            NOTE: Maybe that was fixed even earlier
1117            - audacity 1.3.2-1 (embed)
1118            - matanza <unfixed> (embed)
1119            - tdom 0.8.3~20080525-1 (embed)
1120            - udunits 2.1.8-4 (embed)
1121            - apr-util 1.2 (embed)
1122            - ayttm <unfxed> (embed; bug #561006)
1123            - cableswig <unfixed> (embed)
1124            - cadaver <unfixed> (embed)
1125            - cmake 2.6.0-6 (embed)
1126            - coin3 <unfixed> (embed)
1127            - gdcm 2.0.14-2 (embed)
1128            - ghostscript <unfixed> (embed)
1129            - grmonitor <removed> (embed)
1130            - iceape <unfixed> (embed)
1131            - insighttoolkit 3.16.0-1 (embed)
1132            NOTE: insighttoolkit might've been fixed earlier
1133            - libparagui1.1 1.0.2-1 (embed)
1134            - paraview <unfixed> (embed)
1135            - poco <unfixed> (embed)
1136            - simgear <unfixed> (embed)
1137            - sitecopy 1:0.16.0-1
1138            - smart 1.0-1 (embed)
1139            - swish-e <unfixed> (embed)
1140            - tla <unfixed> (embed)
1141            - vtk 4.1.20030227-1 (embed)
1142            - wbxml2 <unfixed> (embed)
1143            - xmlrpc-c <unfixed> (embed)
1144            - iceweasel <unfixed> (embed)
1145            - kompozer <unfixed> (embed)
1146            - vxl 1.13.0-2 (embed)
1147            - xulrunner <unfixed> (embed)
1148            - apache2 2.2 (embed)
1149            - texlive-bin <not-affected> (Embedded code not compiled in)
1150            - vnc4 <unfixed> (embed)
1151            - xotcl <unfixed> (embed)
1152    
1153    xerces-c
1154            - xerces-c2 <unfixed> (old-version)
1155            - xerces27 <removed> (old-version)
1156    
1157    md5 (RSA's version; not the gnu version provided by coreutils)
1158            - w3c-libwww <removed> (embed; bug #551942)
1159            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1160    
1161    enet
1162            - sauerbraten <unfixed> (embed; #497194)
1163    
1164    eglibc
1165            - glibc <removed> (old-version)
1166    
1167    galib
1168            - gamera 3.2.3-1 (embed)
1169    
1170    configobj
1171            - bzr <unfixed> (embed; bug #555336)
1172            - elisa <unfixed> (embed; bug #555337)
1173            - gaupol <unfixed> (embed; bug #555338)
1174            - ipython <unfixed> (embed; bug #555339)
1175            - pida <unfixed> (embed; bug #555340)
1176            - psychopy <unfixed> (embed; bug #555341)
1177            - rest2web <unfixed> (embed; bug #555342)
1178            - auth2db <unknown> (embed)
1179            - dynagen <unknown> (embed)
1180            - iceweasel <unknown> (embed)
1181            - sabnzbdplus <unknown> (embed)
1182            - xulrunner <unknown> (embed)
1183            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1184    
1185    python-clientform
1186            - bibus <unfixed> (embed; bug #555332)
1187            - zope2.10 <unfixed> (embed; bug #555333)
1188            - zope2.11 <unfixed> (embed; bug #555334)
1189            - python-mechanize <unknown> (embed)
1190            - twill <unknown> (embed)
1191    
1192    python-mechanize
1193            - zope2.10 <unfixed> (embed; bug #555337)
1194            - zope2.11 <unfixed> (embed; bug #555338)
1195            - twill <unknown> (embed; bug #555339)
1196    
1197    pexpect
1198            - duplicity 0.6.06-1 (embed; bug #555361)
1199            - hplip <unfixed> (embed; bug #555362)
1200            - smart <unfixed> (embed; bug #555363)
1201    
1202    pyparsing
1203            - bauble <unfixed> (embed; bug #555366)
1204            - boa-constructor 0.6.1-8 (embed; bug #555367)
1205            - calibre <unfixed> (embed; bug #555368)
1206            - matplotlib <unfixed> (embed; bug #531024)
1207            - zhpy <unfixed> (embed; bug #555370)
1208            - polybori <unknown> (embed)
1209            - python-whoosh <unknown> (embed)
1210            - twill <unknown> (embed)
1211            - zope-textindexng3 <unknown> (embed)
1212    
1213    python-pysqlite2
1214            - python2.4 <unfixed> (embed; bug #553403)
1215            - python2.5 <unfixed> (embed; bug #553403)
1216    
1217    celementtree
1218            - python2.5 <unfixed> (embed)
1219            - smart 1.0-1 (embed)
1220            [etch] - smart <unfixed> (embed)
1221    
1222    elementtree
1223            - python2.5 <unfixed> (embed)
1224            - bzr <unfixed> (embed; bug #555343)
1225            - gedit 2.28.2-1 (embed; bug #555344)
1226            - smart 1.0-1 (embed)
1227            [etch] - smart <unfixed> (embed)
1228            - solfege <unfixed> (embed; bug #555345)
1229            - w3af <unfixed> (embed; bug #555346)
1230            - python-qt4 <unknown> (embed)
1231            - sphinx <unknown> (embed)
1232            - python-nltk <itp> (embed)
1233    
1234    python2.5
1235            - python2.4 <unfixed> (old-version)
1236            - jython <unfixed> (embed)
1237            NOTE: embeds many stdlib modules
1238            - python-django <unfixed> (embed; bug #555419)
1239            NOTE: embeds stdlib modules: doctest, decimal
1240            - gamera 3.2.3-1 (embed)
1241            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1242            - boa-constructor <unfixed> (embed; bug #555426)
1243            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1244            - nicotine <unfixed> (embed; bug #555427)
1245            NOTE: embeds stdlib modules: ConfigParser
1246            - museek+ <unfixed> (embed; bug #555428)
1247            NOTE: embeds stdlib modules: ConfigParser
1248            - vegastrike-data <unfixed> (embed)
1249            NOTE: embeds many stdlib modules
1250            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1251            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1252            - config-manager <unfixed> (embed; bug #555423)
1253            NOTE: embeds stdlib modules: optparse
1254            - jhbuild 2.28.0-1 (embed; bug #555421)
1255            NOTE: embeds stdlib modules: optparse, subprocess
1256            - smart <unfixed> (embed; bug #555432)
1257            NOTE: embeds stdlib modules: optparse
1258            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1259            NOTE: embeds stdlib modules: doctest
1260            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1261            NOTE: embeds stdlib modules: doctest
1262            - distribute <unfixed> (embed)
1263            NOTE: embeds stdlib modules: doctest
1264            - python-setuptools <unfixed> (embed; bug #555435)
1265            NOTE: embeds stdlib modules: doctest
1266            - zope.testing <unfixed> (embed; bug #555436)
1267            NOTE: embeds stdlib modules: doctest
1268            - translate-toolkit <unfixed> (embed; bug #555422)
1269            NOTE: embeds stdlib modules: textwrap, contextlib
1270            - libtpclient-py <unfixed> (embed; bug #555424)
1271            NOTE: embeds stdlib modules: subprocess
1272            - grass <unfixed> (embed; bug #555425)
1273            NOTE: embeds stdlib modules: subprocess
1274            - coherence <unfixed> (embed; bug #555429)
1275            NOTE: embeds stdlib modules: uuid
1276            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1277            NOTE: embeds stdlib modules: uuid
1278            - setroubleshoot <unfixed> (embed; bug #555431)
1279            NOTE: embeds stdlib modules: uuid
1280            - linkchecker <unfixed> (embed; bug #555414)
1281            NOTE: embeds msgfmt.py script
1282            - imdbpy <unfixed> (embed)
1283            NOTE: embeds msgfmt.py script
1284            - kiwi <unfixed> (embed)
1285            NOTE: embeds msgfmt.py script
1286            - moin <unfixed> (embed)
1287            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1288            - plone3 <unfixed> (embed)
1289            NOTE: embeds msgfmt.py script
1290            - roundup <unfixed> (embed)
1291            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1292            - rednotebook <unfixed> (embed; bug #555415)
1293            NOTE: embeds msgfmt.py script
1294            - turbogears <unfixed> (embed)
1295            NOTE: embeds msgfmt.py script
1296            - elisa <unfixed> (embed)
1297            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1298            - calibre <unfixed> (embed)
1299            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1300            - mailman 1:2.1.13-1 (embed; #555416)
1301            NOTE: embeds msgfmt.py script
1302            - python-docutils <unknown> (embed)
1303            NOTE: embeds stdlib modules: optparse, textwrap
1304            - python-imaging <unknown> (embed)
1305            NOTE: embeds stdlib modules: doctest
1306            - python-mechanize <unknown> (embed)
1307            NOTE: embeds stdlib modules: doctest
1308            - twill <unknown> (embed)
1309            NOTE: embeds stdlib modules: subprocess
1310            - zeroc-ice <unknown> (embed)
1311            NOTE: embeds stdlib modules: subprocess
1312            - wxwidgets2.8 <unknown> (embed)
1313            NOTE: embeds stdlib modules: subprocess
1314            - cycle <unknown> (embed)
1315            NOTE: embeds msgfmt.py script
1316            - deluge <unknown> (embed)
1317            NOTE: embeds msgfmt.py script
1318            - opendict <unknown> (embed)
1319            NOTE: embeds msgfmt.py script
1320            - openerp-client <unknown> (embed)
1321            NOTE: embeds msgfmt.py script
1322            - rapidsvn <unknown> (embed)
1323            NOTE: embeds msgfmt.py script
1324            - wammu <unknown> (embed)
1325            NOTE: embeds msgfmt.py script
1326            - gaphor <unknown> (embed)
1327            NOTE: embeds msgfmt.py script
1328            - pida <unknown> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - python-formencode <unknown> (embed)
1331            NOTE: embeds msgfmt.py script
1332            - duplicity <unfixed> (embed)
1333            NOTE: embeds stdlib module: urlparse, tarfile
1334            - pygopherd <unfixed> (embed)
1335            NOTE: embeds stdlib module: zipfile
1336    
1337    argparse
1338            - twill <unfixed> (embed; bug #555347)
1339            - ipython <unfixed> (embed; bug #555348)
1340    
1341    coherence
1342            - elisa <unfixed> (embed; bug #555335)
1343    
1344    simpletal
1345            - plastex <unfixed> (embed; bug #555371)
1346    
1347    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1348            - postr <unfixed> (embed)
1349            - elisa <unfixed> (embed)
1350    
1351    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1352            - apertium-tolk <unfixed> (embed)
1353            - ipython <unfixed> (embed)
1354            - virtaal <unfixed> (embed)
1355    
1356    distribute
1357            - setuptools <removed> (old-version)
1358    
1359    rails
1360            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1361            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1362            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1363            - thin <unfixed> (embed) [./spec/rails_app/*]
1364            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1365            NOTE: be dangerous if developers are naively basing their code off of the examples
1366            NOTE: prototype.js is among the example files
1367    
1368    lucene2 (prototype.js is among the embeds in the following)
1369            - lucene <unfixed> (old-version)
1370            - pylucene <unfixed> (embed)
1371            - libpdfbox-java <unfixed> (embed)
1372            - libfontbox-java <unfixed> (embed)
1373            - libjempbox-java <unfixed> (embed)
1374            - solr <unfixed> (embed)
1375    
1376    unicode-data
1377            - syslinux <unfixed> (embed)
1378            - camomile <unfixed> (embed)
1379            - fribidi <unfixed> (embed)
1380            - m17n-db <unfixed> (embed)
1381            - sbcl <unfixed> (embed)
1382            - heimdal <unfixed> (embed)
1383            - icu <unfixed> (embed)
1384            - icu4j <unfixed> (embed)
1385            - krb5 <unfixed> (embed)
1386            - moodle <unfixed> (embed)
1387            - openldap <unfixed> (embed)
1388            - pike7.6 <unfixed> (embed)
1389            - samba <unfixed> (embed)
1390            - samba4 <unfixed> (embed)
1391            - cmucl <unfixed> (embed)
1392            - typo3-src <unfixed> (embed)
1393            - mauve <unfixed> (embed)
1394            - texlive-bin <unfixed> (embed)
1395            - ypsilon <unfixed> (embed)
1396            - jeuclid <unfixed> (embed)
1397            - charmap.app <unfixed> (embed)
1398            - clisp <unfixed> (embed)
1399            - gnulib <unfixed> (embed)
1400            - opensrs-client <unfixed> (embed)
1401            - saxonb <unfixed> (embed)
1402            - rails <unfixed> (embed)
1403    
1404    feedparser
1405            - rawdog <unfixed> (embed; bug #383422)
1406            - miro <unfixed> (embed; bug #555351)
1407            - calibre <unfixed> (embed; bug #555352)
1408            - freevo <unfixed> (embed; bug #555353)
1409            - pida <unfixed> (embed; bug #555354)
1410            - planet-venus <unfixed> (embed; bug #555355)
1411            - plone3 <unfixed> (embed; bug #555356)
1412            - exaile 0.2.14+debian-1 (embed)
1413            - screenlets 0.1.2-3 (embed)
1414            NOTE: included twice
1415    
1416    agg:
1417            - matplotlib <unfixed> (embed: bug #377271)
1418            - contextfree <unfixed> (embed)
1419            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1420            - exactimage <unfixed> (embed)
1421            - python-enable <unfixed> (embed)
1422            - mapnik 0.5.1-3 (embed)
1423            NOTE: links statically to agg, but shared library is not available (bug #377271)
1424    
1425    vtk
1426            - paraview <unfixable> (embed; bug #495426)
1427    
1428    txt2tags
1429            - rednotebook <unfixed> (embed)
1430    
1431    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1432            - gajim <unfixed> (embed)
1433            - emesene <unfixed> (embed)
1434            - convirt <unfixed> (embed)
1435            - pida <unfixed> (embed)
1436            - rednotebook <unfixed> (embed)
1437    
1438    horde3 (prototype.js is among the embeds in the following)
1439            - mnemo2 <unfixed> (embed)
1440            - nag2 <unfixed> (embed)
1441            - wordpress <unfixed> (embed)
1442            NOTE: Text_Diff (wp-includes/Text/Diff*)
1443    
1444    cimg
1445            - gmic <itp> (embed)
1446    
1447    mootools
1448            - gmic <itp> (embed)
1449    
1450    openldap
1451            - openldap2.3 <removed> (old-version)
1452    
1453    grub2
1454            - grub <unfixed> (old-version)
1455    
1456    gnupginterface
1457            - duplicity <unfixed> (embed)
1458    
1459    python-dateutil
1460            - awn-extras-applets <unfixed> (embed)
1461            - matplotlib <unknown> (embed)
1462    
1463    cups
1464            - cupsys <removed> (old-version)
1465    
1466    yui
1467            - bcfg2 <not-affected> (present in source but not included in any binary files)
1468            - serendipity <unfixed> (embed; bug #557746)
1469            - moodle 1.8.2.dfsg-5 (embed)
1470            - jifty 0.91117-1 (embed; bug #557748)
1471            - webgui 7.7.26-1 (embed)
1472            - loggerhead 1.17-1 (embed)
1473    
1474    quake3 (vanilla source not packaged in debian)
1475            - openarena <unfixable> (fork)
1476    
1477    quake2 (vanilla source not packaged in debian)
1478            - alien-arena <unfixable> (fork)
1479            - warsow <unfixable> (fork)
1480    
1481    libtheora
1482            - iceweasel <not-affected> (uses xulrunner)
1483            - xulrunner <unfixed> (embed; bug #540959)
1484            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1485            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1486            - iceape <unfixed> (embed; bug #559276)
1487            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1488            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1489    
1490    dtoa
1491            - bfilter <unfixed> (embed)
1492            - cacao <unfixed> (embed)
1493            - cdrdao <unfixed> (embed)
1494            - classpath <unfixed> (embed)
1495            - freej <unfixed> (embed)
1496            - iceape <unfixed> (embed)
1497            - iceweasel <unfixed> (embed)
1498            - jscoverage <unfixed> (embed)
1499            - kde4libs <unfixed> (embed)
1500            - kdelibs <unfixed> (embed)
1501            - kompozer <unfixed> (embed)
1502            - libv8 <unfixed> (embed)
1503            - mono <unfixed> (embed)
1504            - newlib <unfixed> (embed)
1505            - nspr <unfixed> (embed)
1506            - php5 <unfixed> (embed)
1507            - polyml <unfixed> (embed)
1508            - qt4-x11 <unfixed> (embed)
1509            - rhino <unfixed> (embed)
1510            NOTE: code translated to Java
1511            - ruby1.8 <unfixed> (embed)
1512            - ruby1.9 <unfixed> (embed)
1513            - ruby1.9.1 <unfixed> (embed)
1514            - sdd <unfixed> (embed)
1515            - sfind <unfixed> (embed)
1516            - star <unfixed> (embed)
1517            - tinymux <unfixed> (embed)
1518            - virtualbox-ose <unfixed> (embed)
1519            - webkit <unfixed> (embed)
1520            - xulrunner <unfixed> (embed)
1521    
1522    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1523            - firegpg <unfixed> (embed)
1524            - enigmail <unfixed> (embed)
1525    
1526    ptmalloc (not packaged in Debian)
1527            - crystalspace <unfixed> (embed)
1528            - qt4-x11 <unfixed> (embed)
1529    
1530    svgalib
1531            - usplash <unfixed> (embed)
1532    
1533    bogl
1534            - usplash <unfixed> (embed)
1535    
1536    taglist
1537            - usplash <unfixed> (embed)
1538    
1539    portaudio
1540            - audacity <unfixed> (embed; bug #323711)
1541    
1542    nyquist
1543            - audacity <unfixed> (embed)
1544            NOTE: embeds a forked nyquist with support for a shared library
1545    
1546  unrar-free: (maybe this code is derived from the original rar, too?)  vamp-plugin-sdk
1547  clamav (seems to be disabled in default config)          - audacity <unfixed> (embed)
1548    
1549  mplayer (DirectMedia Object loader):  wordpress
1550  xine-lib (src/libw32dll/)          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
 vlc (modules/codec/dmo/)  
1551    
1552  libwpd (WordPerfect converter):  php5
1553  openoffice.org          - php4 <removed> (old-version)
1554    
1555  fsplib (http://sourceforge.net/projects/fsp/):  classpath
1556  gftp (lib/fsplib version 0.3)          - libgnucrypto-java <unfixed> (embed; bug #559788)
1557    
1558  librpcsecgss:  libtool
1559  krb5          - apr <unfixed> (static; bug #489625)
1560            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1561            - arts <unfixed> (embed)
1562            - bochs 2.4.2-1 (embed; bug #560884)
1563            - camserv <unfixed> (embed)
1564            - collectd <unfixed> (embed)
1565            - courier-authlib 0.58-4 (embed)
1566            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1567            - cvsnt <unfixed> (embed)
1568            - dico <not-affected> (Uses the system copy of ltdl)
1569            - freeradius 0.1+20010527-1 (embed)
1570            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1571            - ggobi 2.1.9~20091212-1 (embed)
1572            - glame 2.0.1-4 (embed)
1573            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1574            - gnash <unfixed> (embed)
1575            - gnu-smalltalk <unfixed> (embed)
1576            - google-gadgets 0.10.5-0.3 (embed)
1577            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1578            - graphicsmagick 1.3.5-6 (embed)
1579            - graphviz 2.8-3 (embed)
1580            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1581            - guile-1.6 1.6.8-7 (embed)
1582            - hamlib <unfixed> (embed)
1583            - hercules <unfixed> (embed)
1584            - jags 1.0.4-3 (embed; bug #560864)
1585            - kdelibs <unfixed> (embed)
1586            - libannodex <removed> (embed)
1587            - libextractor <unfixed> (embed)
1588            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1589            - libtunepimp <unfixed> (embed)
1590            - mp4h <unfixed> (embed)
1591            - naim <unfixed> (embed)
1592            - parser-mysql <unfixed> (embed)
1593            - pinball 0.3.1-11 (embed)
1594            - redland <unfixed> (embed)
1595            - siproxd <unfixed> (embed)
1596            - ski <unfixed> (embed)
1597            - synfig <unfixed> (embed)
1598            - unixodbc 2.2.4-5 (embed)
1599            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1600            - clamav 0.95+dfsg-1 (embed)
1601            - imagemagick 6:6.2.3.1-1 (embed)
1602            - hypre 2.4.0b-5 (embed)
1603            - lam <unfixed> (embed)
1604            - openmpi <unfixable> (embed; bug #559386)
1605            - parser <unfixed> (embed)
1606            - pdsh 2.18-5 (embed; bug #560892)
1607            - sbnc 1.2-8 (embed)
1608            - sdcc <unfixed> (embed)
1609            - wml <unfixed> (embed)
1610            - proftpd-dfsg <unfixed> (embed; bug #561748)
1611            - babel 1.4.0.dfsg-5 (embed)
1612            - libprelude 0.9.14-2 (embed)
1613            - heartbeat 2.1.4-7 (embed)
1614            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1615            NOTE: might've been fixed earlier
1616            - gcc-* <unknown> (embed)
1617    
1618    ocamlgsl
1619            - orpie 1.5.1-7.1 (embed; bug #550058)
1620    
1621    xdotool
1622            - keynav <unfixed> (embed; bug #560103)
1623    
1624    bulletphysics (not packaged; http://www.bulletphysics.org/)
1625            - supertuxkart <unfixed> (embed)
1626            - blender <unfixed> (embed)
1627    
 jasper:  
1628  ghostscript  ghostscript
1629  gs-gpl          - gs-gpl <removed> (old-version)
   
 libidn:  
 monotone  
1630    
1631  liblua:  icedove
1632  monotone          - thunderbird <removed> (old-version)
1633    
1634  libbotan:  sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1635  montone          - jquery <unfixed> (embed)
1636    
1637  NetXX:  sed
1638  monotone          - ssed <unfixed> (fork)
1639    
1640  libgc:  phpatomlib (http://code.google.com/p/phpatomlib)
1641  mono          - wordpress <unfixed> (embed)
1642    
1643    Services_JSON (http://pear.php.net/package/Services_JSON)
1644            - wordpress <unfixed> (embed)
1645    
1646    phpass (http://www.openwall.com/phpass/)
1647            - gallery2 <unfixed> (embed)
1648            - wordpress <unfixed> (embed)
1649            - typo3-src <unfixed> (fork)
1650            NOTE: file refers to drupal, maybe there's a copy somewhere there
1651            NOTE: a copyright owner search didn't match anything
1652            - libauthen-passphrase-perl <unfixable> (fork)
1653            NOTE: perl implementation of phpass
1654    
1655    squirrelmail
1656            - wordpress <unfixed> (embed)
1657            NOTE: class-pop3.php
1658    
1659    ezSQL (http://www.woyano.com/jv/ezsql)
1660            - wordpress <unfixable> (fork)
1661            NOTE: wp-db.php
1662    
1663    Diff.php (Clay Loveless' version/killersoft.com)
1664            - php-versioncontrol-svn <unfixed>
1665    
1666    libm
1667            - spring <unfixed> (embed)
1668            NOTE: embedded by embedded copy of streflop
1669    
1670    streflop
1671            - spring <unfixed> (embed)
1672    
1673    minizip
1674            - spring <unfixed> (embed)
1675    
1676    oscpack
1677            - spring <unfixed> (embed)
1678    
1679    hpiutil2
1680            - spring <unfixed> (embed)
1681    
1682    p7zip
1683            - spring <unfixed> (embed)
1684    
1685    pythonqt (doesn't seem to be python-qtN, unknown source)
1686            - fontmatrix <unfixed> (embed)
1687            - elmerfem <unfixed> (embed)
1688    
1689    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1690            - docvert <unfixed> (embed)
1691            - jifty <unfixed> (embed)
1692            - kdenetwork <unfixed> (embed)
1693            - mediatomb <unfixed> (embed)
1694            - plastex <unfixed> (embed)
1695            - plone3 <unfixed> (embed)
1696            - python-chaco <unfixed> (embed)
1697            - python-docutils <unfixed> (embed)
1698            - s5 <unfixed> (embed)
1699            - zope2.10 <unfixed> (embed)
1700            - zope2.11 <unfixed> (embed)
1701            - cython <not-affcted> (embed)
1702            NOTE: part of documentation, which is not installed into the binary package
1703    
1704    python-docutils
1705            - zope2.10 <unfixed> (embed)
1706            - zope2.11 <unfixed> (embed)
1707    
1708  pax code:  tesseract
1709  tar          - ocropus <unfixed> (static)
 cpio  

Legend:
Removed from v.7203  
changed lines
  Added in v.13766

  ViewVC Help
Powered by ViewVC 1.1.5