/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 7503 by jamie-guest, Tue Dec 4 20:23:44 2007 UTC revision 13766 by geissert, Fri Jan 8 20:59:56 2010 UTC
# Line 1  Line 1 
1  This file collects cases, where a source package embeds code from  Embedded code copies
2  other projects, without linking dynamically:  ====================
3    
4  xpdf code: (some use xpdf 2, some xpdf 3)  This file collects source packages that embed code from other projects.
5  gpdf (has been replaced by evince - which uses poppler - in Etch)  This is considered bad for fixing security flaws because the fix needs
6  pdftohtml (has been replaced by poppler-utils from the poppler source package, still in Etch, though)  to be applied in multiple source packages.
7  kdegraphics/kpdf (okular, the kpdf replacement in KDE 4 is using poppler, #436164)  
8  tetex-bin (links to poppler since 3.0-12)  Format:
9  texlive-bin (links to poppler)  <srcpkg> (<optional comment about srcpkg>)
10  cupsys (uses xpdf-utils, it's still present in the src, though)          - <embedding srcpkg> <status> (<sort>; bug #<number>)
11  poppler          NOTE: optional comments about the linkage of the embedding srcpkg
12  koffice/kword (upstream is working on using poppler, #436163)  
13  libextractor (uses internal pdf decoder since 0.5.12-1)  status: version number fixing the embedded copy, <unfixed>, <removed>,
14  pdfkit.framework (links to poppler since 0.8-4)          <itp>, <not-affected>, <unknown> if the version number can not
15  ipe (only small parts, but with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp)          be determined, or <unfixable> for unavoidable cases (e.g., forks
16  ruby-gnome2 (has a copy of poppler but links against the shared lib)          that add real value)
17    sort: static (linking statically against a lib)
18  silc-toolkit:        embed (embeds a copy of the library into another source package)
19  silc-client (uses libsilc and libsilcclient)        modified-embed (embeds a code copy that differs from upstream code)
20          fork (a full-blown fork of another source package)
21  dietlibc:        old-version (an older version of essentially the same code)
22  ccontrol (links statically)  
23    The srcpkg might be some string to identify the code if there is no
24  libiax:  specific source package.
25  iaxmodem  
26    Everything up to the next line is ignored.
27  zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  ---BEGIN
28  dpkg  xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29  rsync (somehow derived code base)          NOTE: Fixed packages link to poppler library unless otherwise noted
30  mono          - pdftohtml <unknown>
31  mozilla(?)          [sarge] - pdftohtml <unfixed>
32  Linux kernels          [etch] - pdftohtml <unfixed>
33  pvpgn (links dynamically since 1.7.8-2)          NOTE: has been replaced by poppler-utils
34  mrtg (links dynamically since 2.12.2-1)          - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35  rpm          - texlive-base 3.0-12 (embed)
36            - texlive-bin 2007-1 (embed)
37  libbz2:          NOTE: links to poppler
38  dpkg (statically linked)          - koffice <unfixed> (embed; bug #436163)
39            - libextractor 0.5.12-1 (embed)
40  libgadu/ekg:          NOTE: libextractor is using its own pdf decoder now
41  centericq          - ipe <unfixed> (embed)
42  gaim          NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43  pigdin (links dynamically against libgadu)          - ruby-gnome2 <unknown> (embed)
44  kopete (ships the code, but links dynamically in the Debian package)          NOTE: copy only present in source but links to poppler
45  kadu (not packaged in Debian)          - pdfedit <unfixed> (embed; bug #510794)
46  GNU gadu (not yet packaged in Debian)          - swftools <unfixed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48  xmlrpc: (which package is the "origin" of this code?)  
49  drupal  ppmd
50  phpgroupware          - libcomplearn-mod-ppmd <unfixed> (fork)
51  egroupware          NOTE: discussion in #458152
52  phpwiki  
53  php4 (php-pear, IIRC this was reorganized some weeks ago?)  libevent
54            - transmission 1.71-1 (embed; bug #529372)
55  shtool: (affects build-time only)  
56  mysql-ocaml  lrmi
57  php4          - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59  mozilla:          - xresprobe <unfixed> (embed)
60  mozilla-firefox          - zhcon <unfixed> (embed)
61  mozilla-thunderbird  
62  firefox (to be removed)  peercast
63  thunderbird (to be removed)          - gnome-peercast <removed> (embed)
64  iceweasel          [etch] - gnome-peercast <unfixed> (embed)
65  iceape  
66  icedove  silc-toolkit
67  xulrunner          - silc-client 1.1~beta6-1 (embed)
68  nvu (no longer in Debian)  
69    icclib
70  xli:          - ghostscript <unfixed> (embed)
71  xloadimage          - argyll <unfixed> (embed)
72    
73    dietlibc
74            - ccontrol 0.9.1+20071204-1 (static)
75    
76    libmikmod
77            - sdl-mixer1.2 <unfixed> (embed)
78            TODO: report bug
79    
80    libiax
81            - iaxmodem <unfixable> (embed; bug #548885)
82    
83    spandsp
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86    python-paramiko
87            - fabric 0.9.0-2 (embed; bug #561398)
88    
89    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
90            - dpkg <unfixed> (static)
91            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
92            - rsync <unfixed> (embed)
93            NOTE: somehow derived code base
94            - mono <unfixed> (embed)
95            TODO: check mozilla
96            - Linux kernels <unfixed> (embed)
97            - pvpgn 1.7.8-2 (embed)
98            - mrtg 2.12.2-1 (embed)
99            - rpm <unknown> (embed)
100            NOTE: pinged anibal since when rpm was fixed
101            - tuxcmd-modules <unfixed> (embed)
102            - zsync <unfixed>
103            - tra <unfixed>
104            - sash <unfixed>
105            - nsis <unfixed>
106            - mseide-msegui <unfixed>
107            NOTE: mseide
108            - mirrordir <unfixed>
109            - poco <unfixed>
110            - klibc <unfixed>
111            - ghostscript <unfixed>
112            - freeimage <unfixed>
113            - clamav <unfixed> (fork)
114            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
115            - tuxonice-userui <unfixed>
116            - plt-scheme <unfixed>
117            - perl <unfixed>
118            - paraview <unfixed>
119            - gcvs <unfixed>
120            - dump <unfixed>
121            - aide <unfixed> (static)
122            - dar <unfixed> (static)
123            - avfs <unfixed>
124            - fpc <unfixed>
125            - winff <unfixed>
126            NOTE: inherited from fpc, see #472304
127            - lazarus <unfixed>
128            NOTE: inherited from fpc, see #472304
129            - erlang <unfixed> (embed)
130            - gamera 3.2.3-1 (embed)
131            - python2.4 <unfixed> (embed; bug #553403)
132            - python2.5 <unfixed> (embed; bug #553403)
133    
134    dulwich
135            - hg-git 0.1.0-1 (embed; bug #541996)
136    
137    libvigraimpex
138            - hugin <unfixed> (embed; bug #542259)
139            - enblend-enfuse <unfixed> (embed; bug #542258)
140            - gamera 3.2.3-1 (embed)
141    
142    libbz2
143            - dpkg <unfixed> (static)
144    
145    libgadu
146            - centerim <unfixed> (embed; bug #559783)
147            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
148            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
149            - kdenetwork 4:3.3.2-5 (embed)
150            NOTE: from kdenetwork: kopete
151            - ekg 1:1.8~rc0-1 (embed)
152            - kadu 0.6.0.2-3 (embed; bug #504430)
153            - gadu <itp> (embed)
154    
155    xmlrpc (which package is the "origin" of this code?)
156            - drupal <unfixed> (embed)
157            - phpgroupware <unfixed> (embed)
158            - egroupware <unfixed> (embed)
159            - phpwiki <unfixed> (embed)
160            - php4 <unfixed> (embed)
161            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
162    
163    shtool (affects build-time only)
164            - mysql-ocaml <unfixed> (embed)
165            - php4 <unfixed> (embed)
166    
167  lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  xulrunner
168  openmotif          - iceape <unfixed> (embed; bug #561749)
169  xfree86/xorg (in libxpm)          - iceweasel 2.0.0.19 (embed)
170            - icedove <unfixed> (embed; bug #561750)
171  kerberized apps with BSD origin:          - kompozer <unfixed> (embed; bug #532168)
172  krb4          - galeon 2.0.2-4 (embed)
173  krb5          - epiphany-browser 2.14.3-8 (embed)
174  heimdal          - conkeror 0.9~git080629-2 (embed)
175            - kazehakase 0.4.2-1 (embed)
176  grip: (which pkg is the origin?)  
177  libcdaudio  xli
178  grip          - xloadimage <unfixed> (embed)
179  gnome-vfs (vfs2 as well?)  
180    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
181  fudforum:          - openmotif <unfixed> (embed)
182  phpgroupware-fudforum          - libxpm <unfixed> (embed)
183  egroupware-fudforum (removed from egroupware after sarge)  
184    kerberized apps with BSD origin
185  cvs:          - krb4 <removed> (embed)
186  gcvs (at least an additional script is included, check if there's more)          - krb5 <unfixed> (embed)
187            - heimdal <unfixed> (embed)
188  pcre:  
189  all pythons  grip (which pkg is the origin?)
190  php4 (src included, but Debian package links dynamically)          - libcdaudio <unfixed>
191  analog (src included, but Debian package links dynamically)          - grip <unfixed>
192  libgoffice-1          - gnome-vfs <unfixed>
193  vfu (#450754)          TODO: check vfs2 as well
194  tf5 (since 5.0beta7 the Debian package links dynamically)  
195  monotone (including this starting from 0.37)  fudforum
196  glib (2.14 series for gregex support, only for udeb, regular packag links dynamic)          [etch] - phpgroupware <unfixed> (embed)
197  apache2 (since 2.0.53-4 uses 040_link_external_pcre patch)          NOTE: phpgroupware-fudforum
198  exim4 (since 4.10-0.srh20.12 uses 36_pcre patch to use external pcre)          [sarge] - egroupware-fudforum <removed> (embed)
199    
200  tiff:  libbsd
201  wxpythongtk (check, which debian pkg this is in)          - rdate 1:1.2-3 (embed)
202  older kdegraphics/kpdf releases < 3.3 embedded a copy          - atheme-services <unfixed>
203            - libbsd-arc4random-perl <unfixed>
204  uudeview:          - isakmpd <unfixed>
205  libconvert-uulib-perl          - bsdgames <unfixed> (embed)
206            - bsd-mailx <unfixed> (embed)
207  sqlite: (not affected by security vulnerabilities so far)          - netcat-openbsd <unfixed> (embed; bug #550611)
208  amarok          - openssh <unfixed> (embed)
209  monotone          - unworkable <unfixed> (embed)
210  iceweasel  
211    cvs
212  util-linux/mount:          - gcvs <unfixed> (embed)
213  loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb          NOTE: see cvsunix/src in tarball
214    
215  webmin:  pcre3
216  usermin (only in sarge)          - php4 <unknown> (embed)
217            - analog 2:5.23-0woody1 (embed)
218  sylpheed:          - goffice <unfixed> (embed)
219  sylpheed-claws          NOTE: libgoffice-*
220            - vfu 4.06-4.1 (embed; bug #450754)
221  phpsysinfo:          - tf5 5.0beta7-1 (embed)
222  egroupware          - monotone 0.43-1 (embed)
223  phpgroupware          NOTE: this only affects versions >= 0.37
224            - glib2.0 2.15.2-1 (embed)
225  phpldapadmin:          - apache2 2.0.53-4 (embed)
226  egroupware (removed from egroupware after sarge)          - exim4 4.10-0.srh20.12 (embed)
227            - yacas <unfixed> (embed)
228  chmlib:          NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
229  kchmviewer (ships the code but links dynamically)          - gtamsanalyzer.app 0.42-5 (embed)
230            - tin 980117-1 (embed)
231  libavcodec/libavformat (source: ffmpeg):          - kazehakase 0.5.2-1
232  mplayer (#395252)          - webkit 1.0.1-1 (embed)
233  xvidcap          - qt4-x11 <unfixed> (embed)
234  kino (links statically, does not include code)          NOTE: embedded via webkit copy
235  vlc (links statically, does not include code)          - erlang <unfixed> (embed)
236  smilutils (links statically, does not include code)          - ssed <unfixed> (embed)
237  motion (links statically, does not include code)  
238  gst-ffmpeg  tiff
239  gstreamer0.10-ffmpeg          - wxwindows2.4 2.2.1 (embed)
240  xmovie          - gamera 3.2.3-1 (embed)
241    
242  mad MPEG decoding lib:  uudeview
243  mad          - libconvert-uulib-perl <unfixed> (embed)
244  xine-lib          - pan <unfixed> (embed)
245    
246    sqlite (not affected by security vulnerabilities so far)
247            - amarok <unfixed> (embed)
248            - monotone 0.43-1 (embed)
249            - iceweasel <unfixed> (embed)
250            - heimdal <unfixed> (embed; bug #559616)
251    
252    util-linux/mount
253            - loop-aes-utils <unfixed> (embed)
254            NOTE: contains code from util-linux' mount in the mount-aes-udeb
255    
256    sylpheed
257            - sylpheed-claws <unfixed> (fork)
258    
259    phpsysinfo
260            - egroupware <unfixed> (embed)
261            - phpgroupware <unfixed> (embed)
262    
263    phpldapadmin
264            [sarge] - egroupware <unfixed> (embed)
265            NOTE: removed from egroupware after sarge
266    
267    chmlib
268            - kchmviewer <unknown> (embed)
269    
270    ffmpeg (libavcodec/libavformat)
271            - mplayer 1.0~rc2-14 (embed; bug #395252)
272            - kino 1.0.0-1
273            - vlc <not-affected> (Links dynamically since initial release)
274            - smilutils 0.3.0-10
275            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
276            - motion 3.1.19-1
277            - gstreamer0.10-ffmpeg 0.10.3-2
278            - xmovie <removed> (static)
279            TODO: gimp-gap (potentially using ffmpeg code as well)
280            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
281            - audacity 1.3.7-2 (embed; bug #512278)
282    
283    faad2
284            - mplayer 1.0~rc2-20 (embed)
285            - avifile <unfixed> (embed; bug #538750)
286            - ffmpeg-debian <removed> (old-version)
287    
288    libmad (MPEG decoding lib)
289            - xine-lib <unfixed> (embed)
290            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
291            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
292    
 libdts:  
293  libdts  libdts
294  xine-lib          - xine-lib <unfixed> (embed)
295    
 flac:  
296  flac  flac
297  xine-lib          - xine-lib <unfixed> (embed)
298    
299  liba52:  liba52
300  a52dec          - a52dec <unfixed> (embed)
301  xine-lib          - xine-lib <unfixed> (embed)
302    
303    libmpeg2
304            - mpeg2dec <unfixed> (embed)
305            - xine-lib <unfixed> (embed)
306    
307    libntlm
308            - wget <unfixed> (fork; bug #550436)
309            - curl <unfixed> (fork; bug #550437)
310            - cntlm <unfixed> (fork; bug #550438)
311    
312    uw-imap
313            - pine <unfixed> (embed)
314            - alpine <unfixed> (embed)
315    
316    imagemagick
317            - graphicsmagick <unfixed> (fork)
318    
319    python-urlgrabber
320            - mercurial <unfixed> (embed; bug #531062)
321            - w3af <unfixed> (embed; bug #555372)
322            [experimental] - harvestman <unfixed> (embed; bug #555373)
323    
324    beautifulsoup
325            - python-mechanize <unfixed> (embed; bug #555349)
326            - zope2.11 <unfixed> (embed; bug #555350)
327            - twill <unknown> (embed)
328    
329    halibut
330            - nsis <unfixed> (fork)
331    
332    libghttp
333            - hotway <unfixed> (embed)
334    
335    libsndfile
336            - ardour 1:2.7.1-1 (embed)
337    
338    glibmm2.4
339            - ardour 1:2.7.1-1 (embed)
340    
341    libgnomecanvasmm2.6
342            - ardour 1:2.7.1-1 (embed)
343    
344    libsigc++-2.0
345            - ardour 1:2.7.1-1 (embed)
346    
347    soundtouch
348            - ardour 1:2.7.1-1 (embed)
349    
350    libmms
351            - xine-lib <unfixed> (embed)
352            - mimms <unfixed> (embed)
353    
354    fckeditor
355            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
356            - moin 1.8.2-2 (embed; bug #452599)
357            - karrigell <removed> (embed; bug #452598)
358            - gforge 4.6.99+svn6225-1 (embed)
359            - request-tracker3.8 <unfixed> (embed)
360            - otrs2 <unfixed> (embed)
361    
362    ipatlas (not packaged in Debian)
363            - moodle <unfixed> (embed; bug #507185)
364    
365    libphp-phpmailer
366            - moodle <unfixed> (embed; bug #507185)
367            - mahara <unfixed> (embed)
368            - symfony <unfixed> (embed)
369            [etch] - phpgroupware <unfixed> (embed)
370            NOTE: phpgroupware-felamimail is only in etch
371            - egroupware <unfixed> (embed; bug #504283)
372            - glpi <unfixed>
373    
374    htmlArea (not packaged in Debian)
375            - moodle <unfixed> (embed)
376    
377    giflib
378            - wine <unfixed> (embed; bug #466181)
379    
380    bennu (not packaged in Debian, http://bennu.sourceforge.net)
381            - moodle <unfixed> (embed)
382    
383    smarty
384            - moodle 1.8.2-2 (embed; bug #471158)
385            - gallery2 2.2.5-2 (embed; bug #471160)
386            - mahara 0.9.2-2 (embed; bug #471201)
387            - gosa 2.4beta1-1 (embed; bug #471200)
388    
389  libmpeg2:  TinyMCE
390  mpeg2dec          - wordpress 2.5.1-3 (embed; bug #478257)
391  xine-lib          - moodle <unfixed> (embed; bug #507185)
392            - knowledgeroot <unfixed> (embed)
393  curl:          - joomla <itp> (bug #326398)
394  wget (code for NTLM authentication)  
395    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
396            - scite <unfixed> (embed)
397            - qscintilla <unfixed> (embed)
398            - qscintilla2 <unfixed> (embed)
399            - geany <unfixed> (fork)
400            - anjuta <unfixed> (embed)
401    
402    libphp-adodb
403            - moodle <unfixed> (embed; bug #507185)
404            NOTE: also AdoDB-XML Schema
405            - gallery2 <unfixed> (embed)
406            - phppgadmin <unfixed> (embed)
407            - egroupware <unfixed> (embed)
408            - phpwiki <unfixed> (embed)
409            - torrentflux 2.0beta1-2 (embed)
410            - ipplan <unfixed> (embed)
411            - typo3-src <unfixed> (embed)
412            - cacti <unknown> (embed)
413            [sarge] - cacti <unfixed> (embed)
414            NOTE: dependency exists, but internal version is used
415            - gforge 4.7~rc2-6 (embed)
416            - mahara <unfixed> (embed)
417    
418    gzip
419            - linux-kernel <unfixed> (embed)
420            NOTE: lib/inflate.c
421            - klibc <unfixed> (embed)
422            NOTE: based on linux-kernel gzip code
423            - busybox <unfixed> (embed)
424    
425    neon
426            - cadaver 0.22.3+debian-1 (embed; bug #188381)
427            - gnome-vfs2 <unfixed> (embed; bug #395874)
428            [etch] - litmus <unfixed> (embed; #395875)
429            - litmus <removed> (embed; #395875)
430            [sarge] - screem <unfixed> (embed)
431            - sitecopy 1:0.16.0-1 (embed; bug #395876)
432            [etch] - tla <unfixed> (embed; bug #395877)
433            [sarge] - tla <unfixed> (embed; bug #395877)
434    
435    libmodplug
436            - gst-plugins-bad0.10 <unfixed> (embed)
437    
438    libvncserver
439            - vino <unfixed> (embed)
440    
441    putty
442            - filezilla <unfixed> (embed)
443    
444    tinyxml (not packaged in Debian; itp bug #531968)
445            - filezilla <unfixed>
446            - crystalspace <unfixed> (embed)
447            - libwfut <unfixed> (embed)
448            - rarian <unfixed> (embed)
449            - bulletml <unfixed> (embed)
450            - pokerth <unfixed> (embed)
451            - qutecom <unfixed> (embed)
452            - sofa-framework <unfixed> (embed)
453            - yate <unfixed> (embed)
454            - antigrav <unfixed> (embed)
455            - balder2d <unfixed> (embed)
456            - cal3d <unfixed> (embed)
457            - criticalmass <unfixed> (embed)
458            - ember <unfixed> (embed)
459            - epiphany <unfixed> (embed)
460            - gambit <unfixed> (embed)
461            - noiz2sa <unfixed> (embed)
462            - ogre <unfixed> (embed)
463            - opencity <unfixed> (embed)
464            - openmovieeditor <unfixed> (embed)
465            - pouetchess <unfixed> (embed)
466            - tecnoballz <unfixed> (embed)
467            - trigger-rally <unfixed> (embed)
468            - xmoto <unfixed> (embed)
469            - mapnik <unknown> (embed)
470            NOTE: uses a different XML parser by default
471            - rrootage 0.23a-6 <embed>
472            NOTE: links to libbulltetml
473            - boson <unknown> (embed)
474            NOTE: the embedded code is unused
475    
476    gv
477            - evince <unfixed> (embed)
478            NOTE: ps/ tree from gv 3.5.8
479            NOTE: evince-gtk is affected (a component of evince source package)
480    
481    libXbae
482            - paw <removed> (embed)
483            [etch] - paw <unfixed> (embed)
484    
485    libgtkhtml
486            - claws-mail-extra-plugins <unfixed> (fork)
487    
488    libXaw
489            - paw <removed> (embed)
490            [etch] - paw <unfixed> (embed)
491            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
492    
493    libgd2
494            - graphviz <unfixed> (embed)
495            NOTE: lib/gd seems to be 2.0.33
496            - wml <unfixed> (embed)
497            - libwmf <unfixed> (embed)
498            NOTE: derived from gd 1.6.3
499    
500    rar
501            - unrar-nonfree <unfixed> (embed)
502    
503    unrar-free (maybe this code is derived from the original rar, too?)
504            - clamav <unfixed> (embed)
505            NOTE: seems to be disabled in default config
506    
507    mplayer (DirectMedia Object loader)
508            - xine-lib <unfixed> (embed)
509            NOTE: src/libw32dll/
510            - vlc <unfixed> (embed)
511            NOTE: modules/codec/dmo/
512            - mplayer 1.0~rc2-20 (embed)
513    
514    libwpd (WordPerfect converter)
515            - openoffice.org <unfixed> (embed)
516    
517    fsplib (http://sourceforge.net/projects/fsp/)
518            - gftp <unfixed> (embed)
519            NOTE: lib/fsplib version 0.3
520    
521    sprng
522            - tree-puzzle <unfixed> (embed)
523    
524    librpcsecgss
525            - krb5 <unfixed> (embed)
526    
527    jasper
528            - ghostscript 8.64~dfsg-2 (embed)
529    
530    libiris
531            - psi <unfixed> (embed)
532            - kdenetwork <unfixed> (embed)
533            NOTE: kopete embeds libiris but links dynamically to libidn
534            - kdegames <unfixed> (embed)
535            NOTE: ksirk/kde4
536    
537    libidn
538            - monotone 0.43-1 (embed)
539            - psi <unfixed> (embed)
540            NOTE: psi embeds libiris which embeds libidn
541            - kdegames <unfixed> (embed)
542            NOTE: kdegames/kde4 embeds libiris which embeds libidn
543    
544    lua5.1
545            - monotone 0.43-1 (embed)
546            - nmap 5.00-1 (embed; bug #527997)
547            [lenny] - nmap <unfixed> (embed; bug #527997)
548            - ocropus <unfixed> (embed)
549            - enigma <unfixed> (embed)
550            NOTE: requires lua built with C++
551            - freeciv <unfixed> (embed)
552            - spring <unfixed> (embed)
553    
554    libbotan
555            - monotone 0.43-1 (embed)
556    
557    NetXX
558            - monotone 0.43-1 (embed)
559    
560    libgc
561            - mono <unfixed> (embed)
562    
563    lzma
564            - p7zip <unfixed> (embed)
565            - xz-utils <unfixed> (fork)
566    
567    lzo
568            - grub2 <unfixed> (embed)
569    
570    yassl
571            - mysql-dfsg-5.0 <unfixed> (embed)
572    
573    pax code
574            - tar <unfixed> (embed)
575            - cpio <unfixed> (embed)
576    
577    t1lib
578            - tetex-bin 2.0.2-1 (embed)
579            - texlive-bin <unknown> (embed)
580    
581    guichan
582            - boswars <unfixed> (embed)
583            NOTE: maintainer notified us, working on it
584    
585    tolua
586            - boswars <unfixed> (embed)
587            NOTE: maintainer notified us, working on it
588            NOTE: actually tolua++
589            - ocropus <unfixed> (embed)
590            NOTE: actually tolua++
591            - freeciv <unfixed> (embed)
592            NOTE: actually tolua++
593            - enigma <unfixed> (embed)
594    
595  TODO evaluate:  asio-dev
596  gimp-gap (potentially using ffmpeg code as well)          - luxrender <removed> (embed)
597    
598  uw-imap:  xine-lib
599  pine          - vlc <unfixed> (embed)
600  alpine          NOTE: only parts included in modules/access/rtsp
601    
602  imagemagick:  netpbm
603  graphicsmagick          - tcl8.3 <unfixed> (embed)
604            - tcl8.4 <unfixed> (embed)
605            - tcl8.5 <unfixed> (embed)
606            NOTE: generic/tkImgGIF.c
607    
608    tk8.5
609            - tk8.0 <removed> (old-version)
610            - tk8.3 <unfixed> (old-version)
611            - tk8.4 <unfixed> (old-version)
612            - perl-tk <unfixable> (fork)
613    
614    samba
615            - mc 2:4.6.2~git20080311-1 (embed)
616            NOTE: maintainer is aware of this, currently searching a solution
617    
618    plib1.8.4c2
619            - boson <unfixed> (fork)
620            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
621    
622    fribidi
623            - quesoglc <unfixed> (embed)
624            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
625    
626    glew
627            - quesoglc <unfixed> (embed; bug #489341)
628            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
629            - trigger <unfixed> (embed)
630            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
631            - trigger-rally <unfixed> (embed)
632            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
633    
634    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
635            - transcend <unfixed> (embed)
636            - cultivation <unfixed> (embed)
637            - passage <unfixed> (embed)
638            - gravitation <unfixed> (embed)
639    
640  halibut:  tar
641  nsis          - libarchive <unfixed> (embed)
642            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
643    
644  libghttp:  cpio
645  hotway          - libarchive <unfixed> (embed)
646            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
647    
648  libsndfile:  kdelibs
649  ardour          - webkit <unfixable> (fork)
650            NOTE: khtml
651    
652    kde4libs
653            - kdelibs <unfixable> (old-version)
654    
655    webkit
656            - qt4-x11 <unfixed> (embed; bug #479851)
657            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
658            [lenny] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
659    
660    ftgl
661            - blender 2.46+dfsg-1 (embed)
662    
663    wv
664            - abiword <unfixed>
665    
666    qemu
667            - kvm <unfixed> (embed; bug #543159)
668            NOTE: the kvm package will be removed from sid and squeeze soon (after
669            NOTE: which it will only be in experimental). superceded by qemu-kvm.
670            - qemu-kvm <unfixed> (embed; bug #560853)
671            - xen-3 3.4.2-2 (embed; bug #560856)
672            - xen-unstable <unfixed> (embed; bug #560856)
673    
674    vgabios
675            - kvm <unfixed> (embed; bug #489442)
676    
677    bochs
678            - kvm <unfixed> (embed; bug #489442)
679    
680    speex
681            - vorbis-tools <unfixed> (embed)
682            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
683            - gst-plugins-good0.10 <unfixed> (embed)
684            - xine-lib <unfixed> (embed)
685            - libfishsound <unfixed> (embed)
686            - libannodex <removed> (embed)
687            - vlc <unfixed> (embed)
688            - xmms-speex <unfixed> (embed)
689            - libsdl-sound1.2 <unfixed> (embed)
690            - sweep <unfixed> (embed)
691    
692    libreadline
693            - magic <itp> (old-version)
694    
695    opcode
696            - ode <unfixed> (embed)
697            NOTE: opcode is not a package in debian, it is just embedded
698            NOTE: http://www.codercorner.com/Opcode.htm
699    
700    gimpact
701            - ode <unfixed> (embed)
702            NOTE: gimpact is not a package in debian, it is just embedded
703            NOTE: http://gimpact.sf.net
704    
705    mochikit
706            - mahara <unfixed> (embed)
707            NOTE: they require extra patches, still unmerged upstream
708            - ntop <unfixed> (embed)
709            - coherence 0.6.2-1 (embed)
710            - paste <unfixed> (embed)
711            - turbogears <unfixed> (embed)
712            - plone3 <unfixed> (embed)
713            - xulrunner <unfixed> (embed)
714            - libjifty-plugin-chart-perl <unfixed> (embed)
715            - sabnzbdplus <unfixed> (embed)
716            - tgmochikit <unfixed> (embed)
717    
718    prototypejs
719            - netbeans-ide 6.0.1+dfsg-2 (embed)
720            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
721            - webcit <unfixed> (embed; bug #555219)
722            - asterisk 1:1.6.2.0~rc3-1 (embed)
723            - libjson-ruby 1.1.4-1 (embed; bug #555224)
724            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
725            - horde3 <unfixed> (embed)
726            - knowledgeroot <unfixed> (embed; bug #555230)
727            - mediatomb <unfixed> (embed; bug #555233)
728            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
729            - ebug-http <removed> (embed; bug #555236)
730            - libaws 2.7-1 (embed; bug #555222)
731            - phpgedview <removed> (embed)
732            - poker-network <removed> (embed; bug #555238)
733            - rails 2.1.0-6 (embed)
734            - wordpress 2.5.0-2 (embed; bug #555243)
735            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
736            TODO: search through all of the other zope packages
737            - ampache 3.4.1-2 (embed)
738            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
739            - hobix 0.5~svn20070319-4 (embed; bug #555247)
740            - zabbix 1.6.6-4 (embed; bug #555250)
741            - chora2 <unfixed> (embed; bug #555253)
742            - gollem <unfixed> (embed; bug # 555254)
743            - jscropperui 1.2.1-1 (embed; bug #555257)
744            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
745            - ingo1 <unfixed> (embed; bug #555261)
746            - kronolith2 <unfixed> (embed; bug #555262)
747            - activeldap <unfixed> (embed)
748            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
749            - mantis <unfixed> (embed; bug #555265)
750            - otrs2 2.3.4-6 (embed; bug #555267)
751            - webcalendar <unfixed> (embed; bug #555269)
752            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
753            - jifty 0.90519-1 (embed; bug #555271)
754            - jquery <unfixed> (embed; bug #555272)
755            - passenger 2.2.5debian1-1 (embed; bug #555273)
756            - plone3 <unfixed> (embed; bug #555275)
757            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
758            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
759            - xulrunner <unfixed> (embed)
760            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
761    
762    gdb
763            - insight <unfixed> (embed)
764    
765    e2fsprogs
766            - ldiskfsprogs <unfixable> (fork)
767    
768    quazip (not packaged in Debian)
769            - qcake <unfixed> (embed)
770            NOTE: starting with upstream version 0.6.4
771    
772    exo
773            - pcmanfm <unfixed> (embed; bug #499677)
774            NOTE: slightly modified source code
775    
776    java
777            - openjdk-6 <unfixed>
778            - sun-java5 <unfixed>
779            - sun-java6 <unfixed>
780    
781    libphp-snoopy
782            - ampache 3.4.1-2 (embed; bug #504169)
783            - gforge 4.6.99+svn6094-2 (embed)
784            - mahara 1.0.5-2 (embed; bug #504170)
785            - pixelpost 1.7.1-5 (embed; bug #504171)
786            - mediamate 0.9.3.6-5 (embed; bug #504172)
787            - opendb <removed> (embed; bug #504173)
788            [etch] - opendb <unfixed> (embed; bug #504173)
789            - wordpress 2.5.1-9 (embed; bug #443948)
790            - moodle <unfixed> (embed; bug #507185)
791            [etch] - phpgroupware <unfixed> (embed)
792            NOTE: phpgroupware-felamimail
793            - magpierss 0.72-3 (embed; bug #431089)
794    
795    jquery
796            - zekr <unfixed> (embed)
797            - wordpress <unknown> (embed)
798            - yocto-reader <unfixed> (embed)
799            - textpattern <unfixed> (embed)
800            - genshi 0.5.1-1 (embed)
801            NOTE: compressed file under examples/ dir
802            - prewikka <unfixed> (embed)
803            - libramaze-ruby <unfixed> (embed)
804            - drupal5 <unfixed> (embed)
805            - b2evolution <unfixed> (embed)
806            - wesnoth <unfixed> (embed)
807    
808    tablesorter (jquery plugin, not packaged yet)
809            - wesnoth <unfixed> (embed)
810    
811    kses
812            - wordpress <unfixed> (embed; bug #504242)
813            NOTE: their copy has all methods renamed to wp_<foo>
814            NOTE: kses isn't in Debian, RFP: #504240
815            - moodle <unfixed> (embed; bug #507185)
816            - egroupware <unfixed> (embed)
817    
818    magpierss
819            - wordpress <unfixed> (embed; bug #504242)
820            - moodle <unfixed>
821    
822    php-gettext
823            - wordpress 2.8.4-1 (embed; bug #504242)
824            - docbookwiki <unfixed> (embed)
825            NOTE: non-free
826    
827    libphp-ixr (name may change, it is the Incutio XML-RPC)
828            - wordpress <unfixed> (embed; bug #504242)
829            NOTE: libphp-ixr isn't in Debian, RFP: #504236
830            - dokuwiki <unfixed> (embed)
831            - textpattern <unfixed> (embed)
832    
833    libphp-cas
834            - glpi <unfixed> (embed)
835            - moodle <unfixed> (embed; bug #505984)
836    
837    scriptaculous (prototype.js is among the embeds in the following)
838            - glpi <unfixed> (embed)
839            - libaws <unfixed> (embed; bug #555222)
840            - op-panel <unfixed> (embed)
841            - symfony <unfixed> (embed)
842            NOTE: maintainer says there are extra incompatible changes required
843            - pixelpost 1.7.1-6 (embed)
844            - webhelpers <unfixed> (embed)
845            - qwik <removed> (embed; bug #555241)
846            - smokeping <unfixed> (embed)
847            - turba2 <unfixed> (embed)
848            - typo3-src 4.2.3-1 (embed)
849            - request-tracker3.6 <unfixed> (embed)
850            - request-tracker3.8 <unfixed> (embed)
851            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
852            - wordpress 2.5.0-2 (embed)
853            - libhtml-prototype-perl 1.48-3 (embed)
854    
855    libmarkdown-php
856            - moodle <unfixed> (embed; bug #507185)
857            - pixelpost 1.7.1-6 (embed)
858    
859    php-openid
860            - wordpress-openid <itp> (embed)
861    
862    geshi
863            - dokuwiki 0.0.20080505-3.1 (embed)
864            - pgfouine 1.0-1.1 (embed)
865            - websvn 2.1.0-1 (embed)
866    
867    webcalendar
868            - gforge 4.7~rc2-6 (embed; bug #504758)
869    
870    libical
871            - kdepim <unknown> (fork)
872            NOTE: fixed at some point during 4.0
873            - kdepimlibs 4.2.0-1 (fork)
874            - claws-mail-extra-plugins <unfixed> (fork)
875    
876    libltdl3
877            - kdelibs <unfixed> (embed)
878            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
879            - synfig <unfixed> (embed)
880    
881    harfbuzz
882            - qt4-x11 <unfixed> (embed)
883            - pango1.0 <unfixed> (embed)
884            - fontmatrix <unfixed> (embed)
885    
886    libzip
887            - php5 <unfixable> (modified-embed)
888            - odt2txt <unfixed> (embed; bug #523808)
889    
890    json.php (not packaged; should be replaced with php's built-in functions)
891            - moodle <unfixed>
892            - yui <unfixed>
893            - gallery2 <unfixed>
894            - dokuwiki <unfixed>
895            - typo3-src <unfixed>
896    
897    php-fpdf
898            - tcpdf <itp> (fork)
899            - moodle <unfixed>
900            - phpwiki <unfixed>
901            - egroupware <unfixed>
902            - ldap-account-manager <unfixed> (fork)
903    
904    tcpdf (itp: #495985)
905            - moodle <unfixed>
906            - phpmyadmin <unfixed>
907    
908  glibmm2.4:  typo3
909  ardour          - moodle <unfixed>
910    
911  libgnomecanvasmm2.6:  spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
912  ardour          - moodle <unfixed>
913            - gosa <unfixed>
914    
915    php-ole (itp: #487558)
916            - moodle <unfixed>
917    
918    pieforms (http://www.catalyst.net.nz)
919            - mahara <unfixed>
920    
921    savant2 (http://phpsavant.com)
922            - egroupware <unfixed>
923    
924    rssparser (http://nwow.org)
925            - egroupware <unfixed>
926            - phpgroupware <unfixed>
927    
928    lcms
929            - openjdk-6 <unfixed> (fork)
930    
931    libphp-phplayersmenu
932            - diogenes <unfixed>
933            - phpldapadmin <unfixed>
934    
935    libphp-pclzip
936            - docvert <unfixed>
937            - moodle <unfixed>
938            - egroupware <unfixed>
939    
940    libphp-simplepie
941            - dokuwiki <unfixed>
942            - wordpress <unfixed>
943    
944    libphp-jpgraph
945            - egroupware <unfixed>
946    
947    php-simpletest
948            - moodle <unfixed>
949    
950    libpng
951            - iceweasel <not-affected> (uses xulrunner)
952            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
953            - iceape 1.0.13~pre080614i-0etch1 (embed)
954            - xulrunner 1.9.0.13-1 (embed)
955            [lenny] - xulrunner 1.9.0.11-0lenny1
956            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
957            - gamera 3.2.3-1 (embed)
958    
959    irssi
960            - silc-client <unfixed> (embed)
961            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
962    
963    extc
964            - mtasc <unfixed> (embed)
965            - haxe <unfixed> (embed)
966    
967    swflib
968            - mtasc <unfixed> (embed)
969            - haxe <unfixed> (embed)
970    
971    libitext-java
972            - bouncycastle 2.1.4-1 (embed)
973    
974    python-ply
975            - pyke <unfixed> (embed; bug #555363)
976            - pywbem 0.7.0-4 (embed; bug #555364)
977            - sepolgen <unfixed> (embed; bug #555365)
978            - zope-textindexng3 <unknown> (embed)
979            - iceweasel <not-affected> (uses xulrunner)
980            - xulrunner <unknown> (embed)
981            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
982    
983    libdumbnet (libdnet upstream)
984            - nmap <unfixed> (fork)
985    
986    gcc-4.4
987            - gcc-mingw32 <unfixed> (embed)
988    
989    camlimages
990            - advi <unfixed> (static; bug #550441)
991    
992    memcached
993            - memcachedb <unfixed> (embed)
994    
995    yajl
996            - argyll <unfixed> (embed; bug #544223)
997            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
998    
999    nusoap
1000            - gforge 4.8.2-1 (embed)
1001            - ampache <unfixed> (embed)
1002            - poker-network <unfixed> (old-version)
1003            - moodle <unfixed> (old-version)
1004            NOTE: code is not used when running under php5 and soap is enabled
1005            - phpwiki <unfixed> (old-version)
1006            - gallery2 <unfixed> (old-version)
1007            - typo3-src <unfixed> (old-version)
1008    
1009    libept
1010            - adept <unfixed> (embed; bug #540649)
1011    
1012    libvorbis
1013            - iceweasel <not-affected> (uses xulrunner)
1014            - xulrunner <unfixed> (embed; bug #540959)
1015            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1016            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1017            - iceape <unfixed> (embed)
1018            [etch] - iceape <not-affected> (introduced in 2.0)
1019            [lenny] - iceape <not-affected> (introduced in 2.0)
1020    
1021    cairo
1022            - iceweasel <not-affected> (uses xulrunner)
1023            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1024    
1025    liboggz
1026            - iceweasel <not-affected> (uses xulrunner)
1027            - xulrunner <unfixed> (embed; bug #540959)
1028            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1029            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1030            - iceape <unfixed> (embed)
1031            [etch] - iceape <not-affected> (introduced in 2.0)
1032            [lenny] - iceape <not-affected> (introduced in 2.0)
1033    
1034    liboggplay
1035            - iceweasel <not-affected> (uses xulrunner)
1036            - xulrunner <unfixed> (embed; bug #540959)
1037            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1038            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1039            - iceape <unfixed> (embed)
1040            [etch] - iceape <not-affected> (introduced in 2.0)
1041            [lenny] - iceape <not-affected> (introduced in 2.0)
1042    
1043    php-net-dnsbl
1044            - serendipity <unfixed> (embed; bug #541740)
1045    
1046    php-onyx-rss
1047            - serendipity <unfixed> (embed; bug #541740)
1048    
1049    php-text-wiki
1050            - serendipity <unfixed> (embed; bug #541740)
1051    
1052    php-xml-rpc
1053            - serendipity <unfixed> (embed; bug #541740)
1054    
1055    polarssl (does not have a shared library)
1056            - pdkim <itp> (embed; bug #543150)
1057            - xyssl <unfixed> (old-version)
1058    
1059    pidgin
1060            - gaim <removed> (old-version)
1061            - qutecom <unfixed> (embed; bug #559785)
1062    
1063    icu
1064            - webkit 1.0.1-1 (embed; bug #547214)
1065            - texlive-bin <unfixed> (fork)
1066            NOTE: texlive upstream working with icu upstream to merge their changes
1067    
1068    cyrus-imapd-2.2
1069            - kolab-cyrus-imapd <unfixed> (fork)
1070            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1071    
1072    python-cxx-dev
1073            - freecad 0.9.2646.3-1 (embed; bug #547936)
1074    
1075    zipios++
1076            - freecad 0.9.2646.3-1 (embed; bug #547941)
1077            - enigma 0.92.3-3 (embed)
1078            NOTE: likely fixed earlier, marking etch's version as fixed
1079    
1080    linux-2.6
1081            - kvm <removed> (embed; bug #549973) [./kernel/*]
1082            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1083            - kernel-source-2.6.8 <removed> (old-version)
1084            - kernel-source-2.4.27 <removed> (old-version)
1085            - kernel-source-2.4.24 <removed> (old-version)
1086            - kernel-source-2.2.25 <removed> (old-version)
1087            - kernel-source-2.2.20 <removed> (old-version)
1088    
1089    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1090            - kvm <removed> (embed) [./libfdt/*]
1091            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1092    
1093    qweb (not packaged)
1094            - ajaxterm <unfixed>
1095    
1096    opensaml2
1097            - opensaml <removed> (old-version)
1098    
1099    shibboleth-sp2
1100            - shibboleth-sp <removed> (old-version)
1101    
1102    tuxonice-userui
1103            - suspend2-userui <removed> (old-version)
1104    
1105    expat
1106            - w3c-libwww <removed> (embed; bug #551941)
1107            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1108            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1109            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1110            - python2.4 <unfixable> (embed; bug #553403)
1111            - python-4suite <unfixed> (embed; bug #516935)
1112            - wxwindows2.4 <removed> (embed)
1113            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1114            - wxwidgets2.8 2.8.10.1-2 (embed)
1115            - celementtree 1.0.5-8 (embed)
1116            NOTE: Maybe that was fixed even earlier
1117            - audacity 1.3.2-1 (embed)
1118            - matanza <unfixed> (embed)
1119            - tdom 0.8.3~20080525-1 (embed)
1120            - udunits 2.1.8-4 (embed)
1121            - apr-util 1.2 (embed)
1122            - ayttm <unfxed> (embed; bug #561006)
1123            - cableswig <unfixed> (embed)
1124            - cadaver <unfixed> (embed)
1125            - cmake 2.6.0-6 (embed)
1126            - coin3 <unfixed> (embed)
1127            - gdcm 2.0.14-2 (embed)
1128            - ghostscript <unfixed> (embed)
1129            - grmonitor <removed> (embed)
1130            - iceape <unfixed> (embed)
1131            - insighttoolkit 3.16.0-1 (embed)
1132            NOTE: insighttoolkit might've been fixed earlier
1133            - libparagui1.1 1.0.2-1 (embed)
1134            - paraview <unfixed> (embed)
1135            - poco <unfixed> (embed)
1136            - simgear <unfixed> (embed)
1137            - sitecopy 1:0.16.0-1
1138            - smart 1.0-1 (embed)
1139            - swish-e <unfixed> (embed)
1140            - tla <unfixed> (embed)
1141            - vtk 4.1.20030227-1 (embed)
1142            - wbxml2 <unfixed> (embed)
1143            - xmlrpc-c <unfixed> (embed)
1144            - iceweasel <unfixed> (embed)
1145            - kompozer <unfixed> (embed)
1146            - vxl 1.13.0-2 (embed)
1147            - xulrunner <unfixed> (embed)
1148            - apache2 2.2 (embed)
1149            - texlive-bin <not-affected> (Embedded code not compiled in)
1150            - vnc4 <unfixed> (embed)
1151            - xotcl <unfixed> (embed)
1152    
1153    xerces-c
1154            - xerces-c2 <unfixed> (old-version)
1155            - xerces27 <removed> (old-version)
1156    
1157    md5 (RSA's version; not the gnu version provided by coreutils)
1158            - w3c-libwww <removed> (embed; bug #551942)
1159            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1160    
1161    enet
1162            - sauerbraten <unfixed> (embed; #497194)
1163    
1164    eglibc
1165            - glibc <removed> (old-version)
1166    
1167    galib
1168            - gamera 3.2.3-1 (embed)
1169    
1170    configobj
1171            - bzr <unfixed> (embed; bug #555336)
1172            - elisa <unfixed> (embed; bug #555337)
1173            - gaupol <unfixed> (embed; bug #555338)
1174            - ipython <unfixed> (embed; bug #555339)
1175            - pida <unfixed> (embed; bug #555340)
1176            - psychopy <unfixed> (embed; bug #555341)
1177            - rest2web <unfixed> (embed; bug #555342)
1178            - auth2db <unknown> (embed)
1179            - dynagen <unknown> (embed)
1180            - iceweasel <unknown> (embed)
1181            - sabnzbdplus <unknown> (embed)
1182            - xulrunner <unknown> (embed)
1183            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1184    
1185    python-clientform
1186            - bibus <unfixed> (embed; bug #555332)
1187            - zope2.10 <unfixed> (embed; bug #555333)
1188            - zope2.11 <unfixed> (embed; bug #555334)
1189            - python-mechanize <unknown> (embed)
1190            - twill <unknown> (embed)
1191    
1192    python-mechanize
1193            - zope2.10 <unfixed> (embed; bug #555337)
1194            - zope2.11 <unfixed> (embed; bug #555338)
1195            - twill <unknown> (embed; bug #555339)
1196    
1197    pexpect
1198            - duplicity 0.6.06-1 (embed; bug #555361)
1199            - hplip <unfixed> (embed; bug #555362)
1200            - smart <unfixed> (embed; bug #555363)
1201    
1202    pyparsing
1203            - bauble <unfixed> (embed; bug #555366)
1204            - boa-constructor 0.6.1-8 (embed; bug #555367)
1205            - calibre <unfixed> (embed; bug #555368)
1206            - matplotlib <unfixed> (embed; bug #531024)
1207            - zhpy <unfixed> (embed; bug #555370)
1208            - polybori <unknown> (embed)
1209            - python-whoosh <unknown> (embed)
1210            - twill <unknown> (embed)
1211            - zope-textindexng3 <unknown> (embed)
1212    
1213    python-pysqlite2
1214            - python2.4 <unfixed> (embed; bug #553403)
1215            - python2.5 <unfixed> (embed; bug #553403)
1216    
1217    celementtree
1218            - python2.5 <unfixed> (embed)
1219            - smart 1.0-1 (embed)
1220            [etch] - smart <unfixed> (embed)
1221    
1222    elementtree
1223            - python2.5 <unfixed> (embed)
1224            - bzr <unfixed> (embed; bug #555343)
1225            - gedit 2.28.2-1 (embed; bug #555344)
1226            - smart 1.0-1 (embed)
1227            [etch] - smart <unfixed> (embed)
1228            - solfege <unfixed> (embed; bug #555345)
1229            - w3af <unfixed> (embed; bug #555346)
1230            - python-qt4 <unknown> (embed)
1231            - sphinx <unknown> (embed)
1232            - python-nltk <itp> (embed)
1233    
1234    python2.5
1235            - python2.4 <unfixed> (old-version)
1236            - jython <unfixed> (embed)
1237            NOTE: embeds many stdlib modules
1238            - python-django <unfixed> (embed; bug #555419)
1239            NOTE: embeds stdlib modules: doctest, decimal
1240            - gamera 3.2.3-1 (embed)
1241            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1242            - boa-constructor <unfixed> (embed; bug #555426)
1243            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1244            - nicotine <unfixed> (embed; bug #555427)
1245            NOTE: embeds stdlib modules: ConfigParser
1246            - museek+ <unfixed> (embed; bug #555428)
1247            NOTE: embeds stdlib modules: ConfigParser
1248            - vegastrike-data <unfixed> (embed)
1249            NOTE: embeds many stdlib modules
1250            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1251            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1252            - config-manager <unfixed> (embed; bug #555423)
1253            NOTE: embeds stdlib modules: optparse
1254            - jhbuild 2.28.0-1 (embed; bug #555421)
1255            NOTE: embeds stdlib modules: optparse, subprocess
1256            - smart <unfixed> (embed; bug #555432)
1257            NOTE: embeds stdlib modules: optparse
1258            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1259            NOTE: embeds stdlib modules: doctest
1260            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1261            NOTE: embeds stdlib modules: doctest
1262            - distribute <unfixed> (embed)
1263            NOTE: embeds stdlib modules: doctest
1264            - python-setuptools <unfixed> (embed; bug #555435)
1265            NOTE: embeds stdlib modules: doctest
1266            - zope.testing <unfixed> (embed; bug #555436)
1267            NOTE: embeds stdlib modules: doctest
1268            - translate-toolkit <unfixed> (embed; bug #555422)
1269            NOTE: embeds stdlib modules: textwrap, contextlib
1270            - libtpclient-py <unfixed> (embed; bug #555424)
1271            NOTE: embeds stdlib modules: subprocess
1272            - grass <unfixed> (embed; bug #555425)
1273            NOTE: embeds stdlib modules: subprocess
1274            - coherence <unfixed> (embed; bug #555429)
1275            NOTE: embeds stdlib modules: uuid
1276            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1277            NOTE: embeds stdlib modules: uuid
1278            - setroubleshoot <unfixed> (embed; bug #555431)
1279            NOTE: embeds stdlib modules: uuid
1280            - linkchecker <unfixed> (embed; bug #555414)
1281            NOTE: embeds msgfmt.py script
1282            - imdbpy <unfixed> (embed)
1283            NOTE: embeds msgfmt.py script
1284            - kiwi <unfixed> (embed)
1285            NOTE: embeds msgfmt.py script
1286            - moin <unfixed> (embed)
1287            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1288            - plone3 <unfixed> (embed)
1289            NOTE: embeds msgfmt.py script
1290            - roundup <unfixed> (embed)
1291            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1292            - rednotebook <unfixed> (embed; bug #555415)
1293            NOTE: embeds msgfmt.py script
1294            - turbogears <unfixed> (embed)
1295            NOTE: embeds msgfmt.py script
1296            - elisa <unfixed> (embed)
1297            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1298            - calibre <unfixed> (embed)
1299            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1300            - mailman 1:2.1.13-1 (embed; #555416)
1301            NOTE: embeds msgfmt.py script
1302            - python-docutils <unknown> (embed)
1303            NOTE: embeds stdlib modules: optparse, textwrap
1304            - python-imaging <unknown> (embed)
1305            NOTE: embeds stdlib modules: doctest
1306            - python-mechanize <unknown> (embed)
1307            NOTE: embeds stdlib modules: doctest
1308            - twill <unknown> (embed)
1309            NOTE: embeds stdlib modules: subprocess
1310            - zeroc-ice <unknown> (embed)
1311            NOTE: embeds stdlib modules: subprocess
1312            - wxwidgets2.8 <unknown> (embed)
1313            NOTE: embeds stdlib modules: subprocess
1314            - cycle <unknown> (embed)
1315            NOTE: embeds msgfmt.py script
1316            - deluge <unknown> (embed)
1317            NOTE: embeds msgfmt.py script
1318            - opendict <unknown> (embed)
1319            NOTE: embeds msgfmt.py script
1320            - openerp-client <unknown> (embed)
1321            NOTE: embeds msgfmt.py script
1322            - rapidsvn <unknown> (embed)
1323            NOTE: embeds msgfmt.py script
1324            - wammu <unknown> (embed)
1325            NOTE: embeds msgfmt.py script
1326            - gaphor <unknown> (embed)
1327            NOTE: embeds msgfmt.py script
1328            - pida <unknown> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - python-formencode <unknown> (embed)
1331            NOTE: embeds msgfmt.py script
1332            - duplicity <unfixed> (embed)
1333            NOTE: embeds stdlib module: urlparse, tarfile
1334            - pygopherd <unfixed> (embed)
1335            NOTE: embeds stdlib module: zipfile
1336    
1337    argparse
1338            - twill <unfixed> (embed; bug #555347)
1339            - ipython <unfixed> (embed; bug #555348)
1340    
1341    coherence
1342            - elisa <unfixed> (embed; bug #555335)
1343    
1344    simpletal
1345            - plastex <unfixed> (embed; bug #555371)
1346    
1347    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1348            - postr <unfixed> (embed)
1349            - elisa <unfixed> (embed)
1350    
1351    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1352            - apertium-tolk <unfixed> (embed)
1353            - ipython <unfixed> (embed)
1354            - virtaal <unfixed> (embed)
1355    
1356    distribute
1357            - setuptools <removed> (old-version)
1358    
1359    rails
1360            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1361            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1362            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1363            - thin <unfixed> (embed) [./spec/rails_app/*]
1364            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1365            NOTE: be dangerous if developers are naively basing their code off of the examples
1366            NOTE: prototype.js is among the example files
1367    
1368    lucene2 (prototype.js is among the embeds in the following)
1369            - lucene <unfixed> (old-version)
1370            - pylucene <unfixed> (embed)
1371            - libpdfbox-java <unfixed> (embed)
1372            - libfontbox-java <unfixed> (embed)
1373            - libjempbox-java <unfixed> (embed)
1374            - solr <unfixed> (embed)
1375    
1376    unicode-data
1377            - syslinux <unfixed> (embed)
1378            - camomile <unfixed> (embed)
1379            - fribidi <unfixed> (embed)
1380            - m17n-db <unfixed> (embed)
1381            - sbcl <unfixed> (embed)
1382            - heimdal <unfixed> (embed)
1383            - icu <unfixed> (embed)
1384            - icu4j <unfixed> (embed)
1385            - krb5 <unfixed> (embed)
1386            - moodle <unfixed> (embed)
1387            - openldap <unfixed> (embed)
1388            - pike7.6 <unfixed> (embed)
1389            - samba <unfixed> (embed)
1390            - samba4 <unfixed> (embed)
1391            - cmucl <unfixed> (embed)
1392            - typo3-src <unfixed> (embed)
1393            - mauve <unfixed> (embed)
1394            - texlive-bin <unfixed> (embed)
1395            - ypsilon <unfixed> (embed)
1396            - jeuclid <unfixed> (embed)
1397            - charmap.app <unfixed> (embed)
1398            - clisp <unfixed> (embed)
1399            - gnulib <unfixed> (embed)
1400            - opensrs-client <unfixed> (embed)
1401            - saxonb <unfixed> (embed)
1402            - rails <unfixed> (embed)
1403    
1404    feedparser
1405            - rawdog <unfixed> (embed; bug #383422)
1406            - miro <unfixed> (embed; bug #555351)
1407            - calibre <unfixed> (embed; bug #555352)
1408            - freevo <unfixed> (embed; bug #555353)
1409            - pida <unfixed> (embed; bug #555354)
1410            - planet-venus <unfixed> (embed; bug #555355)
1411            - plone3 <unfixed> (embed; bug #555356)
1412            - exaile 0.2.14+debian-1 (embed)
1413            - screenlets 0.1.2-3 (embed)
1414            NOTE: included twice
1415    
1416    agg:
1417            - matplotlib <unfixed> (embed: bug #377271)
1418            - contextfree <unfixed> (embed)
1419            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1420            - exactimage <unfixed> (embed)
1421            - python-enable <unfixed> (embed)
1422            - mapnik 0.5.1-3 (embed)
1423            NOTE: links statically to agg, but shared library is not available (bug #377271)
1424    
1425    vtk
1426            - paraview <unfixable> (embed; bug #495426)
1427    
1428    txt2tags
1429            - rednotebook <unfixed> (embed)
1430    
1431    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1432            - gajim <unfixed> (embed)
1433            - emesene <unfixed> (embed)
1434            - convirt <unfixed> (embed)
1435            - pida <unfixed> (embed)
1436            - rednotebook <unfixed> (embed)
1437    
1438    horde3 (prototype.js is among the embeds in the following)
1439            - mnemo2 <unfixed> (embed)
1440            - nag2 <unfixed> (embed)
1441            - wordpress <unfixed> (embed)
1442            NOTE: Text_Diff (wp-includes/Text/Diff*)
1443    
1444  libsigc++-2.0:  cimg
1445  ardour          - gmic <itp> (embed)
1446    
1447  soundtouch:  mootools
1448  ardour          - gmic <itp> (embed)
1449    
1450  libmms:  openldap
1451  xine-lib          - openldap2.3 <removed> (old-version)
 mimms  
1452    
1453  FCKeditor: (packaged as fckeditor)  grub2
1454  knowledgeroot          - grub <unfixed> (old-version)
 moin (452599)  
 karrigell (452598)  
 gforge-plugins-extra (fixed since 4.6.99+svn6225-1)  
1455    
1456    gnupginterface
1457            - duplicity <unfixed> (embed)
1458    
1459    python-dateutil
1460            - awn-extras-applets <unfixed> (embed)
1461            - matplotlib <unknown> (embed)
1462    
1463    cups
1464            - cupsys <removed> (old-version)
1465    
1466    yui
1467            - bcfg2 <not-affected> (present in source but not included in any binary files)
1468            - serendipity <unfixed> (embed; bug #557746)
1469            - moodle 1.8.2.dfsg-5 (embed)
1470            - jifty 0.91117-1 (embed; bug #557748)
1471            - webgui 7.7.26-1 (embed)
1472            - loggerhead 1.17-1 (embed)
1473    
1474    quake3 (vanilla source not packaged in debian)
1475            - openarena <unfixable> (fork)
1476    
1477    quake2 (vanilla source not packaged in debian)
1478            - alien-arena <unfixable> (fork)
1479            - warsow <unfixable> (fork)
1480    
1481    libtheora
1482            - iceweasel <not-affected> (uses xulrunner)
1483            - xulrunner <unfixed> (embed; bug #540959)
1484            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1485            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1486            - iceape <unfixed> (embed; bug #559276)
1487            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1488            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1489    
1490    dtoa
1491            - bfilter <unfixed> (embed)
1492            - cacao <unfixed> (embed)
1493            - cdrdao <unfixed> (embed)
1494            - classpath <unfixed> (embed)
1495            - freej <unfixed> (embed)
1496            - iceape <unfixed> (embed)
1497            - iceweasel <unfixed> (embed)
1498            - jscoverage <unfixed> (embed)
1499            - kde4libs <unfixed> (embed)
1500            - kdelibs <unfixed> (embed)
1501            - kompozer <unfixed> (embed)
1502            - libv8 <unfixed> (embed)
1503            - mono <unfixed> (embed)
1504            - newlib <unfixed> (embed)
1505            - nspr <unfixed> (embed)
1506            - php5 <unfixed> (embed)
1507            - polyml <unfixed> (embed)
1508            - qt4-x11 <unfixed> (embed)
1509            - rhino <unfixed> (embed)
1510            NOTE: code translated to Java
1511            - ruby1.8 <unfixed> (embed)
1512            - ruby1.9 <unfixed> (embed)
1513            - ruby1.9.1 <unfixed> (embed)
1514            - sdd <unfixed> (embed)
1515            - sfind <unfixed> (embed)
1516            - star <unfixed> (embed)
1517            - tinymux <unfixed> (embed)
1518            - virtualbox-ose <unfixed> (embed)
1519            - webkit <unfixed> (embed)
1520            - xulrunner <unfixed> (embed)
1521    
1522    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1523            - firegpg <unfixed> (embed)
1524            - enigmail <unfixed> (embed)
1525    
1526    ptmalloc (not packaged in Debian)
1527            - crystalspace <unfixed> (embed)
1528            - qt4-x11 <unfixed> (embed)
1529    
1530    svgalib
1531            - usplash <unfixed> (embed)
1532    
1533    bogl
1534            - usplash <unfixed> (embed)
1535    
1536    taglist
1537            - usplash <unfixed> (embed)
1538    
1539    portaudio
1540            - audacity <unfixed> (embed; bug #323711)
1541    
1542    nyquist
1543            - audacity <unfixed> (embed)
1544            NOTE: embeds a forked nyquist with support for a shared library
1545    
1546  Moodle contains lots of things:  vamp-plugin-sdk
1547  AdoDB          - audacity <unfixed> (embed)
 AdoDB-XML Schema  
 ipatlas  
 PHPMailer  
 Smarty  
 htmlArea  
 TinyMCE  
 bennu  
1548    
 TinyMCE:  
1549  wordpress  wordpress
1550  moodle          - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
 knowledgeroot  
 joomla (ITP)  
   
 scintilla:  
 scite  
 qscintilla  
 qscintilla2  
 geany  
   
 libphp-adodb:  
 gallery2  
 phppgadmin  
 egroupware  
 phpwiki  
 ipplan  
 typo3  
 moodle  
 cacti (dependency exists, but internal version is used -- only in sarge, fixed in etch)  
   
 gzip:  
 linux-kernel (lib/inflate.c)  
 klibc (based on linux-kernel gzip code)  
 busybox  
   
 neon:  
 cadaver (all, but being worked on: #188381)  
 gnome-vfs2 (#395874)  
 litmus (#395875)  
 screem (sarge only)  
 sitecopy (#395876)  
 tla (etch/sid only: #395877)  
   
 libmodplug:  
 gst-plugins-bad0.10  
   
 libvncserver:  
 vino  
   
 putty:  
 filezilla  
1551    
1552  tinyxml (not packaged in Debian):  php5
1553  filezilla          - php4 <removed> (old-version)
1554    
1555  gv:  classpath
1556  evince (ps/ tree from gv 3.5.8)          - libgnucrypto-java <unfixed> (embed; bug #559788)
 evince-gtk (not packaged in Debian)  
1557    
1558  libXbae:  libtool
1559  libpawlib2-lesstif package (from Cernlib)          - apr <unfixed> (static; bug #489625)
1560            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1561            - arts <unfixed> (embed)
1562            - bochs 2.4.2-1 (embed; bug #560884)
1563            - camserv <unfixed> (embed)
1564            - collectd <unfixed> (embed)
1565            - courier-authlib 0.58-4 (embed)
1566            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1567            - cvsnt <unfixed> (embed)
1568            - dico <not-affected> (Uses the system copy of ltdl)
1569            - freeradius 0.1+20010527-1 (embed)
1570            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1571            - ggobi 2.1.9~20091212-1 (embed)
1572            - glame 2.0.1-4 (embed)
1573            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1574            - gnash <unfixed> (embed)
1575            - gnu-smalltalk <unfixed> (embed)
1576            - google-gadgets 0.10.5-0.3 (embed)
1577            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1578            - graphicsmagick 1.3.5-6 (embed)
1579            - graphviz 2.8-3 (embed)
1580            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1581            - guile-1.6 1.6.8-7 (embed)
1582            - hamlib <unfixed> (embed)
1583            - hercules <unfixed> (embed)
1584            - jags 1.0.4-3 (embed; bug #560864)
1585            - kdelibs <unfixed> (embed)
1586            - libannodex <removed> (embed)
1587            - libextractor <unfixed> (embed)
1588            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1589            - libtunepimp <unfixed> (embed)
1590            - mp4h <unfixed> (embed)
1591            - naim <unfixed> (embed)
1592            - parser-mysql <unfixed> (embed)
1593            - pinball 0.3.1-11 (embed)
1594            - redland <unfixed> (embed)
1595            - siproxd <unfixed> (embed)
1596            - ski <unfixed> (embed)
1597            - synfig <unfixed> (embed)
1598            - unixodbc 2.2.4-5 (embed)
1599            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1600            - clamav 0.95+dfsg-1 (embed)
1601            - imagemagick 6:6.2.3.1-1 (embed)
1602            - hypre 2.4.0b-5 (embed)
1603            - lam <unfixed> (embed)
1604            - openmpi <unfixable> (embed; bug #559386)
1605            - parser <unfixed> (embed)
1606            - pdsh 2.18-5 (embed; bug #560892)
1607            - sbnc 1.2-8 (embed)
1608            - sdcc <unfixed> (embed)
1609            - wml <unfixed> (embed)
1610            - proftpd-dfsg <unfixed> (embed; bug #561748)
1611            - babel 1.4.0.dfsg-5 (embed)
1612            - libprelude 0.9.14-2 (embed)
1613            - heartbeat 2.1.4-7 (embed)
1614            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1615            NOTE: might've been fixed earlier
1616            - gcc-* <unknown> (embed)
1617    
1618    ocamlgsl
1619            - orpie 1.5.1-7.1 (embed; bug #550058)
1620    
1621    xdotool
1622            - keynav <unfixed> (embed; bug #560103)
1623    
1624    bulletphysics (not packaged; http://www.bulletphysics.org/)
1625            - supertuxkart <unfixed> (embed)
1626            - blender <unfixed> (embed)
1627    
1628  libXaw:  ghostscript
1629  libpawlib2-lesstif package (from Cernlib)          - gs-gpl <removed> (old-version)
1630    
1631  (I plan to deal with the above two cases after Etch release. -- KevinMcCarty)  icedove
1632            - thunderbird <removed> (old-version)
1633    
1634  libgd2:  sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1635  graphviz (lib/gd seems to be 2.0.33)          - jquery <unfixed> (embed)
1636    
1637  rar:  sed
1638  unrar-nonfree          - ssed <unfixed> (fork)
1639    
1640  unrar-free: (maybe this code is derived from the original rar, too?)  phpatomlib (http://code.google.com/p/phpatomlib)
1641  clamav (seems to be disabled in default config)          - wordpress <unfixed> (embed)
1642    
1643  mplayer (DirectMedia Object loader):  Services_JSON (http://pear.php.net/package/Services_JSON)
1644  xine-lib (src/libw32dll/)          - wordpress <unfixed> (embed)
 vlc (modules/codec/dmo/)  
1645    
1646  libwpd (WordPerfect converter):  phpass (http://www.openwall.com/phpass/)
1647  openoffice.org          - gallery2 <unfixed> (embed)
1648            - wordpress <unfixed> (embed)
1649            - typo3-src <unfixed> (fork)
1650            NOTE: file refers to drupal, maybe there's a copy somewhere there
1651            NOTE: a copyright owner search didn't match anything
1652            - libauthen-passphrase-perl <unfixable> (fork)
1653            NOTE: perl implementation of phpass
1654    
1655  fsplib (http://sourceforge.net/projects/fsp/):  squirrelmail
1656  gftp (lib/fsplib version 0.3)          - wordpress <unfixed> (embed)
1657            NOTE: class-pop3.php
1658    
1659  librpcsecgss:  ezSQL (http://www.woyano.com/jv/ezsql)
1660  krb5          - wordpress <unfixable> (fork)
1661            NOTE: wp-db.php
1662    
1663  jasper:  Diff.php (Clay Loveless' version/killersoft.com)
1664  ghostscript          - php-versioncontrol-svn <unfixed>
 gs-gpl  
1665    
1666  libidn:  libm
1667  monotone          - spring <unfixed> (embed)
1668            NOTE: embedded by embedded copy of streflop
1669    
1670  liblua:  streflop
1671  monotone          - spring <unfixed> (embed)
1672    
1673  libbotan:  minizip
1674  montone          - spring <unfixed> (embed)
1675    
1676  NetXX:  oscpack
1677  monotone          - spring <unfixed> (embed)
1678    
1679  libgc:  hpiutil2
1680  mono          - spring <unfixed> (embed)
1681    
 lzma:  
1682  p7zip  p7zip
1683            - spring <unfixed> (embed)
1684    
1685  lzo:  pythonqt (doesn't seem to be python-qtN, unknown source)
1686  grub2          - fontmatrix <unfixed> (embed)
1687            - elmerfem <unfixed> (embed)
1688  pax code:  
1689  tar  iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1690  cpio          - docvert <unfixed> (embed)
1691            - jifty <unfixed> (embed)
1692  t1lib:          - kdenetwork <unfixed> (embed)
1693  tetex-bin (links to system t1lib since 2.0.2)          - mediatomb <unfixed> (embed)
1694  texlive-bin (links to system t1lib)          - plastex <unfixed> (embed)
1695            - plone3 <unfixed> (embed)
1696            - python-chaco <unfixed> (embed)
1697            - python-docutils <unfixed> (embed)
1698            - s5 <unfixed> (embed)
1699            - zope2.10 <unfixed> (embed)
1700            - zope2.11 <unfixed> (embed)
1701            - cython <not-affcted> (embed)
1702            NOTE: part of documentation, which is not installed into the binary package
1703    
1704    python-docutils
1705            - zope2.10 <unfixed> (embed)
1706            - zope2.11 <unfixed> (embed)
1707    
1708    tesseract
1709            - ocropus <unfixed> (static)

Legend:
Removed from v.7503  
changed lines
  Added in v.13766

  ViewVC Help
Powered by ViewVC 1.1.5