/[secure-testing]/data/embedded-code-copies
ViewVC logotype

Diff of /data/embedded-code-copies

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 3777 by micah, Sat Apr 8 18:30:08 2006 UTC revision 13831 by gilbert-guest, Sat Jan 16 01:59:00 2010 UTC
# Line 1  Line 1 
1    Embedded code copies
2    ====================
3    
4  This file collects cases, where a source package embeds code from  This file collects source packages that embed code from other projects.
5  other projects, without linking dynamically:  This is considered bad for fixing security flaws because the fix needs
6    to be applied in multiple source packages.
7    
8    Format:
9    <srcpkg> (<optional comment about srcpkg>)
10            - <embedding srcpkg> <status> (<sort>; bug #<number>)
11            NOTE: optional comments about the linkage of the embedding srcpkg
12    
13    status: version number fixing the embedded copy, <unfixed>, <removed>,
14            <itp>, <not-affected>, <unknown> if the version number can not
15            be determined, or <unfixable> for unavoidable cases (e.g., forks
16            that add real value)
17    sort: static (linking statically against a lib)
18          embed (embeds a copy of the library into another source package)
19          modified-embed (embeds a code copy that differs from upstream code)
20          fork (a full-blown fork of another source package)
21          old-version (an older version of essentially the same code)
22    
23    The srcpkg might be some string to identify the code if there is no
24    specific source package.
25    
26    Everything up to the next line is ignored.
27    ---BEGIN
28    xpdf (some srcpkgs use xpdf2 code, some xpdf3 code)
29            NOTE: Fixed packages link to poppler library unless otherwise noted
30            - pdftohtml <unknown>
31            [sarge] - pdftohtml <unfixed>
32            [etch] - pdftohtml <unfixed>
33            NOTE: has been replaced by poppler-utils
34            - kdegraphics 4:4.2.2-1 (embed; bug #436164)
35            - texlive-base 3.0-12 (embed)
36            - texlive-bin 2007-1 (embed)
37            NOTE: links to poppler
38            - koffice <unfixed> (embed; bug #436163)
39            - libextractor 0.5.12-1 (embed)
40            NOTE: libextractor is using its own pdf decoder now
41            - ipe <unfixed> (embed)
42            NOTE: embeds small parts with renamed source files: ipestdfonts.cpp, ipefonts.cpp, ipedct.cpp
43            - ruby-gnome2 <unknown> (embed)
44            NOTE: copy only present in source but links to poppler
45            - pdfedit <unfixed> (embed; bug #510794)
46            - swftools <unfixed> (embed; bug #551293)
47            - poppler <unfixable> (fork)
48    
49    ppmd
50            - libcomplearn-mod-ppmd <unfixed> (fork)
51            NOTE: discussion in #458152
52    
53    libevent
54            - transmission 1.71-1 (embed; bug #529372)
55    
56    lrmi
57            - read-edid 2.0.0-1 (embed; bug #495131)
58            - s3switch <unfixed> (embed)
59            - xresprobe <unfixed> (embed)
60            - zhcon <unfixed> (embed)
61    
62    peercast
63            - gnome-peercast <removed> (embed)
64            [etch] - gnome-peercast <unfixed> (embed)
65    
66    silc-toolkit
67            - silc-client 1.1~beta6-1 (embed)
68    
69    icclib
70            - ghostscript <unfixed> (embed)
71            - argyll <unfixed> (embed)
72    
73    dietlibc
74            - ccontrol 0.9.1+20071204-1 (static)
75    
76    libmikmod
77            - sdl-mixer1.2 <unfixed> (embed)
78            TODO: report bug
79    
80    libiax
81            - iaxmodem <unfixable> (embed; bug #548885)
82    
83    spandsp
84            - iaxmodem <unfixable> (embed; bug #548885)
85    
86    python-paramiko
87            - fabric 0.9.0-2 (embed; bug #561398)
88    
89    zlib (lots of apps embed a copy, but link dynamically, but there are a few exceptions)
90            - dpkg <unfixed> (static)
91            NOTE: see 18196.48620.491996.624772@davenant.relativity.greenend.org.uk on debian-devel for discussion
92            - rsync <unfixed> (embed)
93            - cherokee <unfixed> (embed)
94            NOTE: somehow derived code base
95            - mono <unfixed> (embed)
96            TODO: check mozilla
97            - Linux kernels <unfixed> (embed)
98            - pvpgn 1.7.8-2 (embed)
99            - mrtg 2.12.2-1 (embed)
100            - rpm <unknown> (embed)
101            NOTE: pinged anibal since when rpm was fixed
102            - tuxcmd-modules <unfixed> (embed)
103            - zsync <unfixed>
104            - tra <unfixed>
105            - sash <unfixed>
106            - nsis <unfixed>
107            - mseide-msegui <unfixed>
108            NOTE: mseide
109            - mirrordir <unfixed>
110            - poco <unfixed>
111            - klibc <unfixed>
112            - ghostscript <unfixed>
113            - freeimage <unfixed>
114            - clamav <unfixed> (fork)
115            NOTE: from the changelog: "libclamav6 does indeed duplicate parts of the zlib code, but there is not way around that"
116            - tuxonice-userui <unfixed>
117            - plt-scheme <unfixed>
118            - perl <unfixed>
119            - paraview <unfixed>
120            - gcvs <unfixed>
121            - dump <unfixed>
122            - aide <unfixed> (static)
123            - dar <unfixed> (static)
124            - avfs <unfixed>
125            - fpc <unfixed>
126            - winff <unfixed>
127            NOTE: inherited from fpc, see #472304
128            - lazarus <unfixed>
129            NOTE: inherited from fpc, see #472304
130            - erlang <unfixed> (embed)
131            - gamera 3.2.3-1 (embed)
132            - python2.4 <unfixed> (embed; bug #553403)
133            - python2.5 <unfixed> (embed; bug #553403)
134    
135    dulwich
136            - hg-git 0.1.0-1 (embed; bug #541996)
137    
138    libvigraimpex
139            - hugin <unfixed> (embed; bug #542259)
140            - enblend-enfuse <unfixed> (embed; bug #542258)
141            - gamera 3.2.3-1 (embed)
142    
143    libbz2
144            - dpkg <unfixed> (static)
145    
146    libyahoo2
147            - centerim <unfixed> (embed; bug #559783)
148    
149    libmsn
150            - centerim <unfixed> (embed; bug #559783)
151    
152    libgadu
153            - centerim <unfixed> (embed; bug #559783)
154            - pidgin <not-affected> (links dynamically since initial release; fixed in gaim)
155            - gaim 1:2.0.0+beta3-3 (embed; bug #360280)
156            - kdenetwork 4:3.3.2-5 (embed)
157            NOTE: from kdenetwork: kopete
158            - ekg 1:1.8~rc0-1 (embed)
159            - kadu 0.6.0.2-3 (embed; bug #504430)
160            - gadu <itp> (embed)
161    
162    xmlrpc (which package is the "origin" of this code?)
163            - drupal <unfixed> (embed)
164            - phpgroupware <unfixed> (embed)
165            - egroupware <unfixed> (embed)
166            - phpwiki <unfixed> (embed)
167            - php4 <unfixed> (embed)
168            TODO: check, php-pear, IIRC this was reorganized some weeks ago?
169    
170    shtool (affects build-time only)
171            - mysql-ocaml <unfixed> (embed)
172            - php4 <unfixed> (embed)
173    
174    xulrunner
175            - iceape <unfixed> (embed; bug #561749)
176            - iceweasel 2.0.0.19 (embed)
177            - icedove <unfixed> (embed; bug #561750)
178            - kompozer <unfixed> (embed; bug #532168)
179            - galeon 2.0.2-4 (embed)
180            - epiphany-browser 2.14.3-8 (embed)
181            - conkeror 0.9~git080629-2 (embed)
182            - kazehakase 0.4.2-1 (embed)
183    
184    xli
185            - xloadimage <unfixed> (embed)
186    
187    lesstif (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)
188            - openmotif <unfixed> (embed)
189            - libxpm <unfixed> (embed)
190    
191    kerberized apps with BSD origin
192            - krb4 <removed> (embed)
193            - krb5 <unfixed> (embed)
194            - heimdal <unfixed> (embed)
195    
196    grip (which pkg is the origin?)
197            - libcdaudio <unfixed>
198            - grip <unfixed>
199            - gnome-vfs <unfixed>
200            TODO: check vfs2 as well
201    
202    fudforum
203            [etch] - phpgroupware <unfixed> (embed)
204            NOTE: phpgroupware-fudforum
205            [sarge] - egroupware-fudforum <removed> (embed)
206    
207    libbsd
208            - rdate 1:1.2-3 (embed)
209            - atheme-services <unfixed>
210            - libbsd-arc4random-perl <unfixed>
211            - isakmpd <unfixed>
212            - bsdgames <unfixed> (embed)
213            - bsd-mailx <unfixed> (embed)
214            - netcat-openbsd <unfixed> (embed; bug #550611)
215            - openssh <unfixed> (embed)
216            - unworkable <unfixed> (embed)
217    
218    cvs
219            - gcvs <unfixed> (embed)
220            NOTE: see cvsunix/src in tarball
221    
222    pcre3
223            - php4 <unknown> (embed)
224            - analog 2:5.23-0woody1 (embed)
225            - goffice <unfixed> (embed)
226            NOTE: libgoffice-*
227            - vfu 4.06-4.1 (embed; bug #450754)
228            - tf5 5.0beta7-1 (embed)
229            - monotone 0.43-1 (embed)
230            NOTE: this only affects versions >= 0.37
231            - glib2.0 2.15.2-1 (embed)
232            - apache2 2.0.53-4 (embed)
233            - exim4 4.10-0.srh20.12 (embed)
234            - yacas <unfixed> (embed)
235            NOTE: <= 1.0.x; is using pcre to scan text, can execute shell commands via the syntax anyway
236            - gtamsanalyzer.app 0.42-5 (embed)
237            - tin 980117-1 (embed)
238            - kazehakase 0.5.2-1
239            - webkit 1.0.1-1 (embed)
240            - qt4-x11 <unfixed> (embed)
241            NOTE: embedded via webkit copy
242            - erlang <unfixed> (embed)
243            - ssed <unfixed> (embed)
244    
245    tiff
246            - wxwindows2.4 2.2.1 (embed)
247            - gamera 3.2.3-1 (embed)
248    
249    uudeview
250            - libconvert-uulib-perl <unfixed> (embed)
251            - pan <unfixed> (embed)
252    
253    sqlite (not affected by security vulnerabilities so far)
254            - amarok <unfixed> (embed)
255            - monotone 0.43-1 (embed)
256            - iceweasel <unfixed> (embed)
257            - heimdal <unfixed> (embed; bug #559616)
258    
259    util-linux/mount
260            - loop-aes-utils <unfixed> (embed)
261            NOTE: contains code from util-linux' mount in the mount-aes-udeb
262    
263    sylpheed
264            - sylpheed-claws <unfixed> (fork)
265    
266    phpsysinfo
267            - egroupware <unfixed> (embed)
268            - phpgroupware <unfixed> (embed)
269    
270    phpldapadmin
271            [sarge] - egroupware <unfixed> (embed)
272            NOTE: removed from egroupware after sarge
273    
274    chmlib
275            - kchmviewer <unknown> (embed)
276    
277    ffmpeg (libavcodec/libavformat)
278            - mplayer 1.0~rc2-14 (embed; bug #395252)
279            - kino 1.0.0-1
280            - vlc <not-affected> (Links dynamically since initial release)
281            - smilutils 0.3.0-10
282            NOTE: smilutils likely fixed earlier, marking Etch's version as fixed
283            - motion 3.1.19-1
284            - gstreamer0.10-ffmpeg 0.10.3-2
285            - xmovie <removed> (static)
286            TODO: gimp-gap (potentially using ffmpeg code as well)
287            - avifile 1:0.7.48~20090503.ds-1 (embed; bug #538750)
288            - audacity 1.3.7-2 (embed; bug #512278)
289    
290    faad2
291            - mplayer 1.0~rc2-20 (embed)
292            - avifile <unfixed> (embed; bug #538750)
293            - ffmpeg-debian <removed> (old-version)
294    
295    libmad (MPEG decoding lib)
296            - xine-lib <unfixed> (embed)
297            - avifile 1:0.7.48~20090503.ds-1 (embed) [./plugins/libmad/*]
298            TODO: check ocaml-mad, madplay, pymad, xmms-mad, xmms2
299    
 xpdf code: (some use xpdf 2, some xpdf 3)  
 gpdf (will be replaced by evince in Gnome 2.12)  
 pdftohtml (current poppler source package has a ported version, pinged maintainer)  
 kdegraphics/kpdf (upstream is working on using poppler, probably not in time for Etch)  
 tetex-bin (links to poppler since 3.0-12)  
 cupsys (only older releases, recent ones use xpdf-utils, it's still present in the src, though)  
 poppler  
 koffice (upstream is working on using poppler, probably not in time for Etch)  
 libextractor  
 pdfkit.framework (links to poppler since 0.8-4)  
   
 zlib code: (lots of apps embed a copy, but link dynamically, but there are a few exceptions)  
 dpkg  
 rsync (somehow derived code base)  
 mozilla(?)  
 Linux kernels  
 pvpgn (links dynamically since 1.7.8-2)  
 mrtg (links dynamically since 2.12.2-1)  
   
 libgadu/ekg:  
 centericq  
 gaim  
 kopete (ships the code, but links dynamically in the Debian package)  
 kadu (not packaged in Debian)  
 GNU gadu (not yet packaged in Debian)  
   
   
 xmlrpc: (which package is the "origin" of this code?)  
 drupal  
 phpgroupware  
 egroupware  
 phpwiki  
 php4 (php-pear, IIRC this was reorganized some weeks ago?)  
 tikiwiki (not packaged in Debian)  
   
   
 shtool: (affects build-time only)  
 mysql-ocaml  
 php4  
   
   
 mozilla:  
 mozilla-firefox  
 mozilla-thunderbird  
 nvu  
   
   
 xli:  
 xloadimage  
   
   
 lesstif: (beware: two different lesstif APIs supported in one package, MOTIF 1.2 discarded upstream)  
 openmotif  
 xfree86/xorg (in libxpm)  
   
   
 kerberized apps with BSD origin:  
 krb4  
 krb5  
 heimdal  
   
   
 grip: (which pkg is the origin?)  
 libcdaudio  
 grip  
 gnome-vfs (vfs2 as well?)  
   
   
 fudforum:  
 phpgroupware-fudforum  
 egroupware-fudforum  
   
 cvs:  
 gcvs (at least an additional script is included, check if there's more)  
   
 pcre:  
 all pythons  
 php4 (src included, but Debian package links dynamically)  
 analog (src included, but Debian package links dynamically)  
 libgoffice-1  
 tf5 (since 5.0beta7 the Debian package links dynamically)  
   
 tiff:  
 wxpythongtk (check, which debian pkg this is in)  
 older kdegraphics/kpdf releases < 3.3 embedded a copy  
   
   
 uudeview:  
 libconvert-uulib-perl  
   
 sqlite: (not affected by security vulnerabilities so far)  
 amarok  
   
 util-linux/mount:  
 loop-aes-utils contains code from util-linux' mount in the mount-aes-udeb  
   
 webmin:  
 usermin  
   
 sylpheed:  
 sylpheed-claws  
   
 phpsysinfo:  
 egroupware  
 phpgroupware  
   
 phpldapadmin:  
 egroupware  
   
 chmlib:  
 kchmviewer (not packaged in Debian)  
   
 libavcodec/libavformat:  
 ffmpeg  
 xine-lib  
 xvidcap (currently in NEW)  
 kino (links statically, does not include code)  
 vlc (links statically, does not include code)  
 smilutils (links statically, does not include code)  
 motion (links statically, does not include code)  
 gst-ffmpeg  
 xmovie (currently in NEW)  
 gst-ffmpeg  
   
 mad MPEG decoding lib:  
 mad  
 xine-lib  
   
 libdts:  
300  libdts  libdts
301  xine-lib          - xine-lib <unfixed> (embed)
302    
 flac:  
303  flac  flac
304  xine-lib          - xine-lib <unfixed> (embed)
305    
306  liba52:  liba52
307  a52dec          - a52dec <unfixed> (embed)
308  xine-lib          - xine-lib <unfixed> (embed)
309    
310    libmpeg2
311            - mpeg2dec <unfixed> (embed)
312            - xine-lib <unfixed> (embed)
313    
314    libntlm
315            - wget <unfixed> (fork; bug #550436)
316            - curl <unfixed> (fork; bug #550437)
317            - cntlm <unfixed> (fork; bug #550438)
318    
319    uw-imap
320            - pine <unfixed> (embed)
321            - alpine <unfixed> (embed)
322    
323    imagemagick
324            - graphicsmagick <unfixed> (fork)
325    
326    python-urlgrabber
327            - mercurial <unfixed> (embed; bug #531062)
328            - w3af <unfixed> (embed; bug #555372)
329            [experimental] - harvestman <unfixed> (embed; bug #555373)
330    
331    beautifulsoup
332            - python-mechanize <unfixed> (embed; bug #555349)
333            - zope2.11 <removed> (embed; bug #555350)
334            - twill <unknown> (embed)
335    
336    halibut
337            - nsis <unfixed> (fork)
338    
339    libghttp
340            - hotway <unfixed> (embed)
341    
342    libsndfile
343            - ardour 1:2.7.1-1 (embed)
344    
345    glibmm2.4
346            - ardour 1:2.7.1-1 (embed)
347    
348    libgnomecanvasmm2.6
349            - ardour 1:2.7.1-1 (embed)
350    
351    libsigc++-2.0
352            - ardour 1:2.7.1-1 (embed)
353    
354    soundtouch
355            - ardour 1:2.7.1-1 (embed)
356    
357    libmms
358            - xine-lib <unfixed> (embed)
359            - mimms <unfixed> (embed)
360    
361    fckeditor
362            - knowledgeroot 0.9.8.5-3 (embed; bug #461555)
363            - moin 1.8.2-2 (embed; bug #452599)
364            - karrigell <removed> (embed; bug #452598)
365            - gforge 4.6.99+svn6225-1 (embed)
366            - request-tracker3.8 <unfixed> (embed)
367            - otrs2 <unfixed> (embed)
368    
369    ipatlas (not packaged in Debian)
370            - moodle <unfixed> (embed; bug #507185)
371    
372    libphp-phpmailer
373            - moodle <unfixed> (embed; bug #507185)
374            - mahara <unfixed> (embed)
375            - symfony <unfixed> (embed)
376            [etch] - phpgroupware <unfixed> (embed)
377            NOTE: phpgroupware-felamimail is only in etch
378            - egroupware <unfixed> (embed; bug #504283)
379            - glpi <unfixed>
380    
381    htmlArea (not packaged in Debian)
382            - moodle <unfixed> (embed)
383    
384    giflib
385            - wine <unfixed> (embed; bug #466181)
386    
387    bennu (not packaged in Debian, http://bennu.sourceforge.net)
388            - moodle <unfixed> (embed)
389    
390    smarty
391            - moodle 1.8.2-2 (embed; bug #471158)
392            - gallery2 2.2.5-2 (embed; bug #471160)
393            - mahara 0.9.2-2 (embed; bug #471201)
394            - gosa 2.4beta1-1 (embed; bug #471200)
395    
396    TinyMCE
397            - wordpress 2.5.1-3 (embed; bug #478257)
398            - moodle <unfixed> (embed; bug #507185)
399            - knowledgeroot <unfixed> (embed)
400            - joomla <itp> (bug #326398)
401    
402    scintilla (upstream provides static lib, rejected shared lib http://sf.net/support/tracker.php?aid=2488121)
403            - scite <unfixed> (embed)
404            - qscintilla <unfixed> (embed)
405            - qscintilla2 <unfixed> (embed)
406            - geany <unfixed> (fork)
407            - anjuta <unfixed> (embed)
408    
409    libphp-adodb
410            - moodle <unfixed> (embed; bug #507185)
411            NOTE: also AdoDB-XML Schema
412            - gallery2 <unfixed> (embed)
413            - phppgadmin <unfixed> (embed)
414            - egroupware <unfixed> (embed)
415            - phpwiki <unfixed> (embed)
416            - torrentflux 2.0beta1-2 (embed)
417            - ipplan <unfixed> (embed)
418            - typo3-src <unfixed> (embed)
419            - cacti <unknown> (embed)
420            [sarge] - cacti <unfixed> (embed)
421            NOTE: dependency exists, but internal version is used
422            - gforge 4.7~rc2-6 (embed)
423            - mahara <unfixed> (embed)
424    
425    gzip
426            - linux-kernel <unfixed> (embed)
427            NOTE: lib/inflate.c
428            - klibc <unfixed> (embed)
429            NOTE: based on linux-kernel gzip code
430            - busybox <unfixed> (embed)
431    
432    neon
433            - cadaver 0.22.3+debian-1 (embed; bug #188381)
434            - gnome-vfs2 <unfixed> (embed; bug #395874)
435            [etch] - litmus <unfixed> (embed; #395875)
436            - litmus <removed> (embed; #395875)
437            [sarge] - screem <unfixed> (embed)
438            - sitecopy 1:0.16.0-1 (embed; bug #395876)
439            [etch] - tla <unfixed> (embed; bug #395877)
440            [sarge] - tla <unfixed> (embed; bug #395877)
441    
442    libmodplug
443            - gst-plugins-bad0.10 <unfixed> (embed)
444    
445    libvncserver
446            - vino <unfixed> (embed)
447    
448    putty
449            - filezilla <unfixed> (embed)
450    
451    tinyxml (not packaged in Debian; itp bug #531968)
452            - filezilla <unfixed>
453            - crystalspace <unfixed> (embed)
454            - libwfut <unfixed> (embed)
455            - rarian <unfixed> (embed)
456            - bulletml <unfixed> (embed)
457            - pokerth <unfixed> (embed)
458            - qutecom <unfixed> (embed)
459            - sofa-framework <unfixed> (embed)
460            - yate <unfixed> (embed)
461            - antigrav <unfixed> (embed)
462            - balder2d <unfixed> (embed)
463            - cal3d <unfixed> (embed)
464            - criticalmass <unfixed> (embed)
465            - ember <unfixed> (embed)
466            - epiphany <unfixed> (embed)
467            - gambit <unfixed> (embed)
468            - noiz2sa <unfixed> (embed)
469            - ogre <unfixed> (embed)
470            - opencity <unfixed> (embed)
471            - openmovieeditor <unfixed> (embed)
472            - pouetchess <unfixed> (embed)
473            - tecnoballz <unfixed> (embed)
474            - trigger-rally <unfixed> (embed)
475            - xmoto <unfixed> (embed)
476            - mapnik <unknown> (embed)
477            NOTE: uses a different XML parser by default
478            - rrootage 0.23a-6 <embed>
479            NOTE: links to libbulltetml
480            - boson <unknown> (embed)
481            NOTE: the embedded code is unused
482    
483    gv
484            - evince <unfixed> (embed)
485            NOTE: ps/ tree from gv 3.5.8
486            NOTE: evince-gtk is affected (a component of evince source package)
487    
488    libXbae
489            - paw <removed> (embed)
490            [etch] - paw <unfixed> (embed)
491    
492    libgtkhtml
493            - claws-mail-extra-plugins <unfixed> (fork)
494    
495    libXaw
496            - paw <removed> (embed)
497            [etch] - paw <unfixed> (embed)
498            NOTE: I plan to deal with the above two cases after Etch release. -- KevinMcCarty
499    
500    libgd2
501            - graphviz <unfixed> (embed)
502            NOTE: lib/gd seems to be 2.0.33
503            - wml <unfixed> (embed)
504            - libwmf <unfixed> (embed)
505            NOTE: derived from gd 1.6.3
506    
507    rar
508            - unrar-nonfree <unfixed> (embed)
509    
510    unrar-free (maybe this code is derived from the original rar, too?)
511            - clamav <unfixed> (embed)
512            NOTE: seems to be disabled in default config
513    
514    mplayer (DirectMedia Object loader)
515            - xine-lib <unfixed> (embed)
516            NOTE: src/libw32dll/
517            - vlc <unfixed> (embed)
518            NOTE: modules/codec/dmo/
519            - mplayer 1.0~rc2-20 (embed)
520    
521    libwpd (WordPerfect converter)
522            - openoffice.org <unfixed> (embed)
523    
524    fsplib (http://sourceforge.net/projects/fsp/)
525            - gftp <unfixed> (embed)
526            NOTE: lib/fsplib version 0.3
527    
528    sprng
529            - tree-puzzle <unfixed> (embed)
530    
531    librpcsecgss
532            - krb5 <unfixed> (embed)
533    
534    jasper
535            - ghostscript 8.64~dfsg-2 (embed)
536    
537    libiris
538            - psi <unfixed> (embed)
539            - kdenetwork <unfixed> (embed)
540            NOTE: kopete embeds libiris but links dynamically to libidn
541            - kdegames <unfixed> (embed)
542            NOTE: ksirk/kde4
543    
544    libidn
545            - monotone 0.43-1 (embed)
546            - psi <unfixed> (embed)
547            NOTE: psi embeds libiris which embeds libidn
548            - kdegames <unfixed> (embed)
549            NOTE: kdegames/kde4 embeds libiris which embeds libidn
550    
551    lua5.1
552            - monotone 0.43-1 (embed)
553            - nmap 5.00-1 (embed; bug #527997)
554            [lenny] - nmap <unfixed> (embed; bug #527997)
555            - ocropus <unfixed> (embed)
556            - enigma <unfixed> (embed)
557            NOTE: requires lua built with C++
558            - freeciv <unfixed> (embed)
559            - spring <unfixed> (embed)
560    
561    libbotan
562            - monotone 0.43-1 (embed)
563    
564    NetXX
565            - monotone 0.43-1 (embed)
566    
567    libgc
568            - mono <unfixed> (embed)
569    
570    lzma
571            - p7zip <unfixed> (embed)
572            - xz-utils <unfixed> (fork)
573    
574    lzo
575            - grub2 <unfixed> (embed)
576    
577    yassl
578            - mysql-dfsg-5.0 <unfixed> (embed)
579    
580    pax code
581            - tar <unfixed> (embed)
582            - cpio <unfixed> (embed)
583    
584    t1lib
585            - tetex-bin 2.0.2-1 (embed)
586            - texlive-bin <unknown> (embed)
587    
588    guichan
589            - boswars <unfixed> (embed)
590            NOTE: maintainer notified us, working on it
591    
592    tolua
593            - boswars <unfixed> (embed)
594            NOTE: maintainer notified us, working on it
595            NOTE: actually tolua++
596            - ocropus <unfixed> (embed)
597            NOTE: actually tolua++
598            - freeciv <unfixed> (embed)
599            NOTE: actually tolua++
600            - enigma <unfixed> (embed)
601    
602  libmpeg2:  asio-dev
603  mpeg2dec          - luxrender <removed> (embed)
 xine-lib  
604    
605  curl:  xine-lib
606  wget (code for NTLM authentication)          - vlc <unfixed> (embed)
607            NOTE: only parts included in modules/access/rtsp
 TODO evaluate:  
 gimp-gap (potentially using ffmpeg code as well)  
   
 uw-imap:  
 pine  
   
 imagemagick:  
 graphicsmagick  
   
 halibut:  
 nsis  
608    
609  libghttp:  netpbm
610  hotway          - tcl8.3 <unfixed> (embed)
611            - tcl8.4 <unfixed> (embed)
612            - tcl8.5 <unfixed> (embed)
613            NOTE: generic/tkImgGIF.c
614    
615    tk8.5
616            - tk8.0 <removed> (old-version)
617            - tk8.3 <unfixed> (old-version)
618            - tk8.4 <unfixed> (old-version)
619            - perl-tk <unfixable> (fork)
620    
621    samba
622            - mc 2:4.6.2~git20080311-1 (embed)
623            NOTE: maintainer is aware of this, currently searching a solution
624    
625    plib1.8.4c2
626            - boson <unfixed> (fork)
627            NOTE: embedding the font pieces of plib, based on the header file it is forked, contains "Added by AB for boson." and similar
628    
629    fribidi
630            - quesoglc <unfixed> (embed)
631            NOTE: compiled against system fribidi in Debian - embed only used when fribidi is not available on the system
632    
633    glew
634            - quesoglc <unfixed> (embed; bug #489341)
635            NOTE: waiting on GLEW_MX version of glew (see bug #474488)
636            - trigger <unfixed> (embed)
637            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
638            - trigger-rally <unfixed> (embed)
639            NOTE: http://lists.debian.org/debian-devel-games/2009/12/msg00007.html
640    
641    minorGems (pabs contacted upstream about shared lib, he considers minorGems an 'ever-evolving collection of reusable code fragments' for his own use)
642            - transcend <unfixed> (embed)
643            - cultivation <unfixed> (embed)
644            - passage <unfixed> (embed)
645            - gravitation <unfixed> (embed)
646    
647    tar
648            - libarchive <unfixed> (embed)
649            NOTE: FreeBSD tar (tar/bsdtar.c) in libarchive 1.2 and higher. libarchive ends up statically linked into bsdtar executable
650    
651    cpio
652            - libarchive <unfixed> (embed)
653            NOTE: cpio included in libarchive 2.2 and higher, but not compiled until libarchive 2.4.11-1 (as bsdcpio package)
654    
655    kde4libs
656            - kdelibs <unfixable> (old-version)
657    
658    webkit
659            - qt4-x11 <unfixed> (embed; bug #479851)
660            [etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
661            [lenny] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
662            - kde4libs <unfixable> (fork)
663            NOTE: kde4lib's khtml and webkit were forked from khtml (this tracking, which seems
664            NOTE: reversed genesis-wise, is used because of so much other stuff in kde4libs)
665    
666    ftgl
667            - blender 2.46+dfsg-1 (embed)
668    
669    wv
670            - abiword <unfixed>
671    
672    qemu
673            - kvm <unfixed> (embed; bug #543159)
674            NOTE: the kvm package will be removed from sid and squeeze soon (after
675            NOTE: which it will only be in experimental). superceded by qemu-kvm.
676            - qemu-kvm <unfixed> (embed; bug #560853)
677            - xen-3 3.4.2-2 (embed; bug #560856)
678            - xen-unstable <unfixed> (embed; bug #560856)
679    
680    vgabios
681            - kvm <unfixed> (embed; bug #489442)
682    
683    bochs
684            - kvm <unfixed> (embed; bug #489442)
685    
686    speex
687            - vorbis-tools <unfixed> (embed)
688            NOTE: while comiled against libspeex-dev, ogg123/speex_format.c is compiled with embedded code copied from speexdec.c
689            - gst-plugins-good0.10 <unfixed> (embed)
690            - xine-lib <unfixed> (embed)
691            - libfishsound <unfixed> (embed)
692            - libannodex <removed> (embed)
693            - vlc <unfixed> (embed)
694            - xmms-speex <unfixed> (embed)
695            - libsdl-sound1.2 <unfixed> (embed)
696            - sweep <unfixed> (embed)
697    
698    libreadline
699            - magic <itp> (old-version)
700    
701    opcode
702            - ode <unfixed> (embed)
703            NOTE: opcode is not a package in debian, it is just embedded
704            NOTE: http://www.codercorner.com/Opcode.htm
705    
706    gimpact
707            - ode <unfixed> (embed)
708            NOTE: gimpact is not a package in debian, it is just embedded
709            NOTE: http://gimpact.sf.net
710    
711    mochikit
712            - mahara <unfixed> (embed)
713            NOTE: they require extra patches, still unmerged upstream
714            - ntop <unfixed> (embed)
715            - coherence 0.6.2-1 (embed)
716            - paste <unfixed> (embed)
717            - turbogears <unfixed> (embed)
718            - plone3 <removed> (embed)
719            - xulrunner <unfixed> (embed)
720            - libjifty-plugin-chart-perl <unfixed> (embed)
721            - sabnzbdplus <unfixed> (embed)
722            - tgmochikit <unfixed> (embed)
723    
724    prototypejs
725            - netbeans-ide 6.0.1+dfsg-2 (embed)
726            - auth2db 0.2.5-2+dfsg-1 (embed; bug #555218)
727            - webcit <unfixed> (embed; bug #555219)
728            - asterisk 1:1.6.2.0~rc3-1 (embed)
729            - libjson-ruby 1.1.4-1 (embed; bug #555224)
730            - lucene2 2.9.1+ds1-2 (embed; bug #555226)
731            - horde3 <unfixed> (embed)
732            - knowledgeroot <unfixed> (embed; bug #555230)
733            - mediatomb <unfixed> (embed; bug #555233)
734            - mt-daapd 0.9~r1696.dfsg-6lenny2 (embed)
735            - ebug-http <removed> (embed; bug #555236)
736            - libaws 2.7-1 (embed; bug #555222)
737            - phpgedview <removed> (embed)
738            - poker-network <removed> (embed; bug #555238)
739            - rails 2.1.0-6 (embed)
740            - wordpress 2.5.0-2 (embed; bug #555243)
741            - zope <not-affected> (the prototypejs embed is not in any of the obvious zope packages, e.g. zope2.9, zope2.10, zope2.11, and zope3)
742            TODO: search through all of the other zope packages
743            - ampache 3.4.1-2 (embed)
744            - exaile 0.2.14+debian-2.1 (embed; bug #555245)
745            - hobix 0.5~svn20070319-4 (embed; bug #555247)
746            - zabbix 1.6.6-4 (embed; bug #555250)
747            - chora2 <unfixed> (embed; bug #555253)
748            - gollem <unfixed> (embed; bug # 555254)
749            - jscropperui 1.2.1-1 (embed; bug #555257)
750            - scriptaculous <not-affected> (uses system prototype.js since initial upload; bug #555260)
751            - ingo1 <unfixed> (embed; bug #555261)
752            - kronolith2 <unfixed> (embed; bug #555262)
753            - activeldap <unfixed> (embed)
754            - libv8 <not-affected> (contains a google-specific implementation of prototype.js)
755            - mantis 1.1.2+dfsg-1 (embed; bug #555265)
756            - otrs2 2.3.4-6 (embed; bug #555267)
757            - webcalendar <unfixed> (embed; bug #555269)
758            - redmine 0.9.0~svn2907-1 (embed; bug #555270)
759            - jifty 0.90519-1 (embed; bug #555271)
760            - jquery 1.4-1 (embed; bug #555272)
761            - passenger 2.2.5debian1-1 (embed; bug #555273)
762            - plone3 <removed> (embed; bug #555275)
763            - wesnoth <not-affected> (prototype.js not included in any of the binary packages; bug #555277)
764            - libhtml-prototype-perl 1.48-3 (embed; bug #538920)
765            - xulrunner <unfixed> (embed)
766            NOTE: included in iceweasel/xulrunner unit tests directory, so may not be security-relevant
767    
768    gdb
769            - insight <unfixed> (embed)
770    
771    e2fsprogs
772            - ldiskfsprogs <unfixable> (fork)
773    
774    quazip (not packaged in Debian)
775            - qcake <unfixed> (embed)
776            NOTE: starting with upstream version 0.6.4
777    
778    exo
779            - pcmanfm <unfixed> (embed; bug #499677)
780            NOTE: slightly modified source code
781    
782    java
783            - openjdk-6 <unfixed>
784            - sun-java5 <unfixed>
785            - sun-java6 <unfixed>
786    
787    libphp-snoopy
788            - ampache 3.4.1-2 (embed; bug #504169)
789            - gforge 4.6.99+svn6094-2 (embed)
790            - mahara 1.0.5-2 (embed; bug #504170)
791            - pixelpost 1.7.1-5 (embed; bug #504171)
792            - mediamate 0.9.3.6-5 (embed; bug #504172)
793            - opendb <removed> (embed; bug #504173)
794            [etch] - opendb <unfixed> (embed; bug #504173)
795            - wordpress 2.5.1-9 (embed; bug #443948)
796            - moodle <unfixed> (embed; bug #507185)
797            [etch] - phpgroupware <unfixed> (embed)
798            NOTE: phpgroupware-felamimail
799            - magpierss 0.72-3 (embed; bug #431089)
800    
801    jquery
802            - zekr <unfixed> (embed)
803            - wordpress <unknown> (embed)
804            - yocto-reader <unfixed> (embed)
805            - textpattern <unfixed> (embed)
806            - genshi 0.5.1-1 (embed)
807            NOTE: compressed file under examples/ dir
808            - prewikka <unfixed> (embed)
809            - libramaze-ruby <unfixed> (embed)
810            - drupal5 <unfixed> (embed)
811            - b2evolution <unfixed> (embed)
812            - wesnoth <unfixed> (embed)
813    
814    tablesorter (jquery plugin, not packaged yet)
815            - wesnoth <unfixed> (embed)
816    
817    kses
818            - wordpress <unfixed> (embed; bug #504242)
819            NOTE: their copy has all methods renamed to wp_<foo>
820            NOTE: kses isn't in Debian, RFP: #504240
821            - moodle <unfixed> (embed; bug #507185)
822            - egroupware <unfixed> (embed)
823    
824    magpierss
825            - wordpress <unfixed> (embed; bug #504242)
826            - moodle <unfixed>
827    
828    php-gettext
829            - wordpress 2.8.4-1 (embed; bug #504242)
830            - docbookwiki <unfixed> (embed)
831            NOTE: non-free
832    
833    libphp-ixr (name may change, it is the Incutio XML-RPC)
834            - wordpress <unfixed> (embed; bug #504242)
835            NOTE: libphp-ixr isn't in Debian, RFP: #504236
836            - dokuwiki <unfixed> (embed)
837            - textpattern <unfixed> (embed)
838    
839    libphp-cas
840            - glpi <unfixed> (embed)
841            - moodle <unfixed> (embed; bug #505984)
842    
843    scriptaculous (prototype.js is among the embeds in the following)
844            - glpi <unfixed> (embed)
845            - libaws <unfixed> (embed; bug #555222)
846            - op-panel <unfixed> (embed)
847            - symfony <unfixed> (embed)
848            NOTE: maintainer says there are extra incompatible changes required
849            - pixelpost 1.7.1-6 (embed)
850            - webhelpers <unfixed> (embed)
851            - qwik <removed> (embed; bug #555241)
852            - smokeping <unfixed> (embed)
853            - turba2 <unfixed> (embed)
854            - typo3-src 4.2.3-1 (embed)
855            - request-tracker3.6 <unfixed> (embed)
856            - request-tracker3.8 <unfixed> (embed)
857            - rt-extension-emailcompletion <not-affected> (prototype.js not included in the binary package)
858            - wordpress 2.5.0-2 (embed)
859            - libhtml-prototype-perl 1.48-3 (embed)
860    
861    libmarkdown-php
862            - moodle <unfixed> (embed; bug #507185)
863            - pixelpost 1.7.1-6 (embed)
864    
865    php-openid
866            - wordpress-openid <itp> (embed)
867    
868    geshi
869            - dokuwiki 0.0.20080505-3.1 (embed)
870            - pgfouine 1.0-1.1 (embed)
871            - websvn 2.1.0-1 (embed)
872    
873    webcalendar
874            - gforge 4.7~rc2-6 (embed; bug #504758)
875    
876    libical
877            - kdepim <unknown> (fork)
878            NOTE: fixed at some point during 4.0
879            - kdepimlibs 4.2.0-1 (fork)
880            - claws-mail-extra-plugins <unfixed> (fork)
881    
882    libltdl3
883            - kdelibs <unfixed> (embed)
884            NOTE: it's been said it sets RT_GLOBAL (or something like that) at runtime and version in experimental of libltdl can optionally set it
885            - synfig <unfixed> (embed)
886    
887    harfbuzz
888            - qt4-x11 <unfixed> (embed)
889            - pango1.0 <unfixed> (embed)
890            - fontmatrix <unfixed> (embed)
891    
892    libzip
893            - php5 <unfixable> (modified-embed)
894            - odt2txt <unfixed> (embed; bug #523808)
895    
896    json.php (not packaged; should be replaced with php's built-in functions)
897            - moodle <unfixed>
898            - yui <unfixed>
899            - gallery2 <unfixed>
900            - dokuwiki <unfixed>
901            - typo3-src <unfixed>
902    
903    php-fpdf
904            - tcpdf <itp> (fork)
905            - moodle <unfixed>
906            - phpwiki <unfixed>
907            - egroupware <unfixed>
908            - ldap-account-manager <unfixed> (fork)
909    
910    tcpdf (itp: #495985)
911            - moodle <unfixed>
912            - phpmyadmin <unfixed>
913    
914    typo3
915            - moodle <unfixed>
916    
917    spreadsheet_writeexcel (PHP port of libspreadsheet-writeexcel-perl; itp: #487557)
918            - moodle <unfixed>
919            - gosa <unfixed>
920    
921    php-ole (itp: #487558)
922            - moodle <unfixed>
923    
924    pieforms (http://www.catalyst.net.nz)
925            - mahara <unfixed>
926    
927    savant2 (http://phpsavant.com)
928            - egroupware <unfixed>
929    
930    rssparser (http://nwow.org)
931            - egroupware <unfixed>
932            - phpgroupware <unfixed>
933    
934    lcms
935            - openjdk-6 <unfixed> (fork)
936    
937    libphp-phplayersmenu
938            - diogenes <unfixed>
939            - phpldapadmin <unfixed>
940    
941    libphp-pclzip
942            - docvert <unfixed>
943            - moodle <unfixed>
944            - egroupware <unfixed>
945    
946    libphp-simplepie
947            - dokuwiki <unfixed>
948            - wordpress <unfixed>
949    
950    libphp-jpgraph
951            - egroupware <unfixed>
952    
953    php-simpletest
954            - moodle <unfixed>
955    
956    libpng
957            - iceweasel <not-affected> (uses xulrunner)
958            - icedove 1.5.0.13+1.5.0.15b.dfsg1+prepatch080614i-0etch1, 2.0.0.19-1 (embed)
959            - iceape 1.0.13~pre080614i-0etch1 (embed)
960            - xulrunner 1.9.0.13-1 (embed)
961            [lenny] - xulrunner 1.9.0.11-0lenny1
962            [etch] - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
963            - gamera 3.2.3-1 (embed)
964    
965    irssi
966            - silc-client <unfixed> (embed)
967            NOTE: Seems to be a pre-0.8.12 version that is used in irssi-plugin-silc
968    
969    extc
970            - mtasc <unfixed> (embed)
971            - haxe <unfixed> (embed)
972    
973    swflib
974            - mtasc <unfixed> (embed)
975            - haxe <unfixed> (embed)
976    
977    libitext-java
978            - bouncycastle 2.1.4-1 (embed)
979    
980    python-ply
981            - pyke <unfixed> (embed; bug #555363)
982            - pywbem 0.7.0-4 (embed; bug #555364)
983            - sepolgen <unfixed> (embed; bug #555365)
984            - zope-textindexng3 <unknown> (embed)
985            - iceweasel <not-affected> (uses xulrunner)
986            - xulrunner <unknown> (embed)
987            - wireshark <not-affected> (python-ply modules are not installed into binary packages; see #554613)
988    
989    libdumbnet (libdnet upstream)
990            - nmap <unfixed> (fork)
991    
992    gcc-4.4
993            - gcc-mingw32 <unfixed> (embed)
994    
995    camlimages
996            - advi <unfixed> (static; bug #550441)
997    
998    memcached
999            - memcachedb <unfixed> (embed)
1000    
1001    yajl
1002            - argyll <unfixed> (embed; bug #544223)
1003            NOTE: reference, confirmed by build logs: http://lists.debian.org/debian-mentors/2009/08/msg00062.html
1004    
1005    nusoap
1006            - gforge 4.8.2-1 (embed)
1007            - ampache <unfixed> (embed)
1008            - poker-network <unfixed> (old-version)
1009            - moodle <unfixed> (old-version)
1010            NOTE: code is not used when running under php5 and soap is enabled
1011            - phpwiki <unfixed> (old-version)
1012            - gallery2 <unfixed> (old-version)
1013            - typo3-src <unfixed> (old-version)
1014    
1015    libept
1016            - adept <unfixed> (embed; bug #540649)
1017    
1018    libvorbis
1019            - iceweasel <not-affected> (uses xulrunner)
1020            - xulrunner <unfixed> (embed; bug #540959)
1021            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1022            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1023            - iceape <unfixed> (embed)
1024            [etch] - iceape <not-affected> (introduced in 2.0)
1025            [lenny] - iceape <not-affected> (introduced in 2.0)
1026    
1027    cairo
1028            - iceweasel <not-affected> (uses xulrunner)
1029            - xulrunner 1.8.0.15~pre080614i-0etch1 (embed)
1030    
1031    liboggz
1032            - iceweasel <not-affected> (uses xulrunner)
1033            - xulrunner <unfixed> (embed; bug #540959)
1034            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1035            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1036            - iceape <unfixed> (embed)
1037            [etch] - iceape <not-affected> (introduced in 2.0)
1038            [lenny] - iceape <not-affected> (introduced in 2.0)
1039    
1040    liboggplay
1041            - iceweasel <not-affected> (uses xulrunner)
1042            - xulrunner <unfixed> (embed; bug #540959)
1043            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1044            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1045            - iceape <unfixed> (embed)
1046            [etch] - iceape <not-affected> (introduced in 2.0)
1047            [lenny] - iceape <not-affected> (introduced in 2.0)
1048    
1049    php-net-dnsbl
1050            - serendipity <unfixed> (embed; bug #541740)
1051    
1052    php-onyx-rss
1053            - serendipity <unfixed> (embed; bug #541740)
1054    
1055    php-text-wiki
1056            - serendipity <unfixed> (embed; bug #541740)
1057    
1058    php-xml-rpc
1059            - serendipity <unfixed> (embed; bug #541740)
1060    
1061    polarssl (does not have a shared library)
1062            - pdkim <itp> (embed; bug #543150)
1063            - xyssl <unfixed> (old-version)
1064    
1065    pidgin
1066            - gaim <removed> (old-version)
1067            - qutecom <unfixed> (embed; bug #559785)
1068    
1069    icu
1070            - webkit 1.0.1-1 (embed; bug #547214)
1071            - texlive-bin <unfixed> (fork)
1072            NOTE: texlive upstream working with icu upstream to merge their changes
1073    
1074    cyrus-imapd-2.2
1075            - kolab-cyrus-imapd <unfixed> (fork)
1076            - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]
1077    
1078    python-cxx-dev
1079            - freecad 0.9.2646.3-1 (embed; bug #547936)
1080    
1081    zipios++
1082            - freecad 0.9.2646.3-1 (embed; bug #547941)
1083            - enigma 0.92.3-3 (embed)
1084            NOTE: likely fixed earlier, marking etch's version as fixed
1085    
1086    linux-2.6
1087            - kvm <removed> (embed; bug #549973) [./kernel/*]
1088            - linux-kbuild-2.6 <unfixed> (embed; bug #550379) [./kbuild/*]
1089            - kernel-source-2.6.8 <removed> (old-version)
1090            - kernel-source-2.4.27 <removed> (old-version)
1091            - kernel-source-2.4.24 <removed> (old-version)
1092            - kernel-source-2.2.25 <removed> (old-version)
1093            - kernel-source-2.2.20 <removed> (old-version)
1094    
1095    libfdt (not yet packaged separately for debian; http://www.jdl.com/software/)
1096            - kvm <removed> (embed) [./libfdt/*]
1097            - qemu-kvm <unfixed> (embed) [./libfdt/*]
1098    
1099    qweb (not packaged)
1100            - ajaxterm <unfixed>
1101    
1102    opensaml2
1103            - opensaml <removed> (old-version)
1104    
1105    shibboleth-sp2
1106            - shibboleth-sp <removed> (old-version)
1107    
1108    tuxonice-userui
1109            - suspend2-userui <removed> (old-version)
1110    
1111    expat
1112            - w3c-libwww <removed> (embed; bug #551941)
1113            [etch] - w3c-libwww <unfixed> (embed; bug #551941) [./modules/expat/*]
1114            - python-xml <unfixed> (embed; bug #551940) [./extensions/expat/*]
1115            - python2.5 <unfixable> (embed; bug #553403) [./Modules/expat/*]
1116            - python2.4 <unfixable> (embed; bug #553403)
1117            - python-4suite <unfixed> (embed; bug #516935)
1118            - wxwindows2.4 <removed> (embed)
1119            - wxwidgets2.6 2.6.3.2.2-4 (embed)
1120            - wxwidgets2.8 2.8.10.1-2 (embed)
1121            - celementtree 1.0.5-8 (embed)
1122            NOTE: Maybe that was fixed even earlier
1123            - audacity 1.3.2-1 (embed)
1124            - matanza <unfixed> (embed)
1125            - tdom 0.8.3~20080525-1 (embed)
1126            - udunits 2.1.8-4 (embed)
1127            - apr-util 1.2 (embed)
1128            - ayttm <unfxed> (embed; bug #561006)
1129            - cableswig <unfixed> (embed)
1130            - cadaver <unfixed> (embed)
1131            - cmake 2.6.0-6 (embed)
1132            - coin3 <unfixed> (embed)
1133            - gdcm 2.0.14-2 (embed)
1134            - ghostscript <unfixed> (embed)
1135            - grmonitor <removed> (embed)
1136            - iceape <unfixed> (embed)
1137            - insighttoolkit 3.16.0-1 (embed)
1138            NOTE: insighttoolkit might've been fixed earlier
1139            - libparagui1.1 1.0.2-1 (embed)
1140            - paraview <unfixed> (embed)
1141            - poco <unfixed> (embed)
1142            - simgear <unfixed> (embed)
1143            - sitecopy 1:0.16.0-1
1144            - smart 1.0-1 (embed)
1145            - swish-e <not-affected> (Linked against libxml, which is used instead)
1146            - tla 1.3.5+dfsg-15 (embed)
1147            - vtk 4.1.20030227-1 (embed)
1148            - wbxml2 <unfixed> (embed)
1149            - xmlrpc-c <unfixed> (embed)
1150            - iceweasel <unfixed> (embed)
1151            - kompozer <unfixed> (embed)
1152            - vxl 1.13.0-2 (embed)
1153            - xulrunner <unfixed> (embed)
1154            - apache2 2.2 (embed)
1155            - texlive-bin <not-affected> (Embedded code not compiled in)
1156            - vnc4 <unfixed> (embed)
1157            - xotcl <unfixed> (embed)
1158    
1159    xerces-c
1160            - xerces-c2 <unfixed> (old-version)
1161            - xerces27 <removed> (old-version)
1162    
1163    md5 (RSA's version; not the gnu version provided by coreutils)
1164            - w3c-libwww <removed> (embed; bug #551942)
1165            [etch] - w3c-libwww <unfixed> (embed; bug #551942) [./modules/md5/*]
1166    
1167    enet
1168            - sauerbraten <unfixed> (embed; #497194)
1169    
1170    eglibc
1171            - glibc <removed> (old-version)
1172    
1173    galib
1174            - gamera 3.2.3-1 (embed)
1175    
1176    configobj
1177            - bzr <unfixed> (embed; bug #555336)
1178            - elisa <unfixed> (embed; bug #555337)
1179            - gaupol <unfixed> (embed; bug #555338)
1180            - ipython <unfixed> (embed; bug #555339)
1181            - pida <unfixed> (embed; bug #555340)
1182            - psychopy <unfixed> (embed; bug #555341)
1183            - rest2web <unfixed> (embed; bug #555342)
1184            - auth2db <unknown> (embed)
1185            - dynagen <unknown> (embed)
1186            - iceweasel <unknown> (embed)
1187            - sabnzbdplus <unknown> (embed)
1188            - xulrunner <unknown> (embed)
1189            - nipy <not-affected> (part of an example [/examples/neurospin/neurospy/configobj.py], which is not installed into binary packages)
1190    
1191    python-clientform
1192            - bibus <unfixed> (embed; bug #555332)
1193            - zope2.10 <unfixed> (embed; bug #555333)
1194            - zope2.11 <removed> (embed; bug #555334)
1195            - python-mechanize <unknown> (embed)
1196            - twill <unknown> (embed)
1197    
1198    python-mechanize
1199            - zope2.10 <unfixed> (embed; bug #555337)
1200            - zope2.11 <removed> (embed; bug #555338)
1201            - twill <unknown> (embed; bug #555339)
1202    
1203    pexpect
1204            - duplicity 0.6.06-1 (embed; bug #555361)
1205            - hplip <unfixed> (embed; bug #555362)
1206            - smart <unfixed> (embed; bug #555363)
1207    
1208    pyparsing
1209            - bauble <unfixed> (embed; bug #555366)
1210            - boa-constructor 0.6.1-8 (embed; bug #555367)
1211            - calibre <unfixed> (embed; bug #555368)
1212            - matplotlib <unfixed> (embed; bug #531024)
1213            - zhpy <unfixed> (embed; bug #555370)
1214            - polybori <unknown> (embed)
1215            - python-whoosh <unknown> (embed)
1216            - twill <unknown> (embed)
1217            - zope-textindexng3 <unknown> (embed)
1218    
1219    python-pysqlite2
1220            - python2.4 <unfixed> (embed; bug #553403)
1221            - python2.5 <unfixed> (embed; bug #553403)
1222    
1223    celementtree
1224            - python2.5 <unfixed> (embed)
1225            - smart 1.0-1 (embed)
1226            [etch] - smart <unfixed> (embed)
1227    
1228    elementtree
1229            - python2.5 <unfixed> (embed)
1230            - bzr <unfixed> (embed; bug #555343)
1231            - gedit 2.28.2-1 (embed; bug #555344)
1232            - smart 1.0-1 (embed)
1233            [etch] - smart <unfixed> (embed)
1234            - solfege <unfixed> (embed; bug #555345)
1235            - w3af <unfixed> (embed; bug #555346)
1236            - python-qt4 <unknown> (embed)
1237            - sphinx <unknown> (embed)
1238            - python-nltk <itp> (embed)
1239    
1240    python2.5
1241            - python2.4 <unfixed> (old-version)
1242            - jython <unfixed> (embed)
1243            NOTE: embeds many stdlib modules
1244            - python-django <unfixed> (embed; bug #555419)
1245            NOTE: embeds stdlib modules: doctest, decimal
1246            - gamera 3.2.3-1 (embed)
1247            NOTE: embeds stdlib modules: ConfigParser, optparse, sets, textwrap
1248            - boa-constructor <unfixed> (embed; bug #555426)
1249            NOTE: embeds stdlib modules: ConfigParser, tarfile, zipfile, xmlrpclib
1250            - nicotine <unfixed> (embed; bug #555427)
1251            NOTE: embeds stdlib modules: ConfigParser
1252            - museek+ <unfixed> (embed; bug #555428)
1253            NOTE: embeds stdlib modules: ConfigParser
1254            - vegastrike-data <unfixed> (embed)
1255            NOTE: embeds many stdlib modules
1256            - codespeak-lib 1.1.1-1 (embed; bug #555420)
1257            NOTE: embeds stdlib modules: doctest, optparse, subprocess, textwrap
1258            - config-manager <unfixed> (embed; bug #555423)
1259            NOTE: embeds stdlib modules: optparse
1260            - jhbuild 2.28.0-1 (embed; bug #555421)
1261            NOTE: embeds stdlib modules: optparse, subprocess
1262            - smart <unfixed> (embed; bug #555432)
1263            NOTE: embeds stdlib modules: optparse
1264            - pyprotocols 1.0a.svn20070625-5 (embed; bug #555433)
1265            NOTE: embeds stdlib modules: doctest
1266            - ruledispatch 0.5a.svn20080510-4 (embed; bug #555434)
1267            NOTE: embeds stdlib modules: doctest
1268            - distribute <unfixed> (embed)
1269            NOTE: embeds stdlib modules: doctest
1270            - python-setuptools <unfixed> (embed; bug #555435)
1271            NOTE: embeds stdlib modules: doctest
1272            - zope.testing <unfixed> (embed; bug #555436)
1273            NOTE: embeds stdlib modules: doctest
1274            - translate-toolkit <unfixed> (embed; bug #555422)
1275            NOTE: embeds stdlib modules: textwrap, contextlib
1276            - libtpclient-py <unfixed> (embed; bug #555424)
1277            NOTE: embeds stdlib modules: subprocess
1278            - grass <unfixed> (embed; bug #555425)
1279            NOTE: embeds stdlib modules: subprocess
1280            - coherence <unfixed> (embed; bug #555429)
1281            NOTE: embeds stdlib modules: uuid
1282            - python-django-extensions 0.4.2pre+git200911182050-1 (embed; bug #555430)
1283            NOTE: embeds stdlib modules: uuid
1284            - setroubleshoot <unfixed> (embed; bug #555431)
1285            NOTE: embeds stdlib modules: uuid
1286            - linkchecker <unfixed> (embed; bug #555414)
1287            NOTE: embeds msgfmt.py script
1288            - imdbpy <unfixed> (embed)
1289            NOTE: embeds msgfmt.py script
1290            - kiwi <unfixed> (embed)
1291            NOTE: embeds msgfmt.py script
1292            - moin <unfixed> (embed)
1293            NOTE: embeds msgfmt.py script, stdlib modules: cgitb, difflib, tarfile
1294            - plone3 <removed> (embed)
1295            NOTE: embeds msgfmt.py script
1296            - roundup <unfixed> (embed)
1297            NOTE: embeds msgfmt.py script, stdlib modules: cgitb
1298            - rednotebook <unfixed> (embed; bug #555415)
1299            NOTE: embeds msgfmt.py script
1300            - turbogears <unfixed> (embed)
1301            NOTE: embeds msgfmt.py script
1302            - elisa <unfixed> (embed)
1303            NOTE: embeds msgfmt.py script, stdlib modules: uuid
1304            - calibre <unfixed> (embed)
1305            NOTE: embeds msgfmt.py script, stdlib modules: zipfile
1306            - mailman 1:2.1.13-1 (embed; #555416)
1307            NOTE: embeds msgfmt.py script
1308            - python-docutils <unknown> (embed)
1309            NOTE: embeds stdlib modules: optparse, textwrap
1310            - python-imaging <unknown> (embed)
1311            NOTE: embeds stdlib modules: doctest
1312            - python-mechanize <unknown> (embed)
1313            NOTE: embeds stdlib modules: doctest
1314            - twill <unknown> (embed)
1315            NOTE: embeds stdlib modules: subprocess
1316            - zeroc-ice <unknown> (embed)
1317            NOTE: embeds stdlib modules: subprocess
1318            - wxwidgets2.8 <unknown> (embed)
1319            NOTE: embeds stdlib modules: subprocess
1320            - cycle <unknown> (embed)
1321            NOTE: embeds msgfmt.py script
1322            - deluge <unknown> (embed)
1323            NOTE: embeds msgfmt.py script
1324            - opendict <unknown> (embed)
1325            NOTE: embeds msgfmt.py script
1326            - openerp-client <unknown> (embed)
1327            NOTE: embeds msgfmt.py script
1328            - rapidsvn <unknown> (embed)
1329            NOTE: embeds msgfmt.py script
1330            - wammu <unknown> (embed)
1331            NOTE: embeds msgfmt.py script
1332            - gaphor <unknown> (embed)
1333            NOTE: embeds msgfmt.py script
1334            - pida <unknown> (embed)
1335            NOTE: embeds msgfmt.py script
1336            - python-formencode <unknown> (embed)
1337            NOTE: embeds msgfmt.py script
1338            - duplicity <unfixed> (embed)
1339            NOTE: embeds stdlib module: urlparse, tarfile
1340            - pygopherd <unfixed> (embed)
1341            NOTE: embeds stdlib module: zipfile
1342    
1343    argparse
1344            - twill <unfixed> (embed; bug #555347)
1345            - ipython <unfixed> (embed; bug #555348)
1346    
1347    coherence
1348            - elisa <unfixed> (embed; bug #555335)
1349    
1350    simpletal
1351            - plastex <unfixed> (embed; bug #555371)
1352    
1353    flickrpc (not packaged in Debian, http://burtonini.com/bzr/flickrpc/)
1354            - postr <unfixed> (embed)
1355            - elisa <unfixed> (embed)
1356    
1357    simplegeneric (not packaged in Debian, http://pypi.python.org/pypi/simplegeneric)
1358            - apertium-tolk <unfixed> (embed)
1359            - ipython <unfixed> (embed)
1360            - virtaal <unfixed> (embed)
1361    
1362    distribute
1363            - setuptools <removed> (old-version)
1364    
1365    rails
1366            - jruby1.2 <unfixed> (embed) [./bench/rails/*]
1367            - libgettext-ruby <unfixed> (embed) [./samples/rails/*]
1368            - libopenid-ruby <unfixed> (embed) [./examples/rails_openid/*]
1369            - thin <unfixed> (embed) [./spec/rails_app/*]
1370            NOTE: this is a subdirectory of examples, which in general is a non-issue, but may
1371            NOTE: be dangerous if developers are naively basing their code off of the examples
1372            NOTE: prototype.js is among the example files
1373    
1374    lucene2 (prototype.js is among the embeds in the following)
1375            - lucene <unfixed> (old-version)
1376            - pylucene <unfixed> (embed)
1377            - libpdfbox-java <unfixed> (embed)
1378            - libfontbox-java <unfixed> (embed)
1379            - libjempbox-java <unfixed> (embed)
1380            - solr <unfixed> (embed)
1381    
1382    unicode-data
1383            - syslinux <unfixed> (embed)
1384            - camomile <unfixed> (embed)
1385            - fribidi <unfixed> (embed)
1386            - m17n-db <unfixed> (embed)
1387            - sbcl <unfixed> (embed)
1388            - heimdal <unfixed> (embed)
1389            - icu <unfixed> (embed)
1390            - icu4j <unfixed> (embed)
1391            - krb5 <unfixed> (embed)
1392            - moodle <unfixed> (embed)
1393            - openldap <unfixed> (embed)
1394            - pike7.6 <unfixed> (embed)
1395            - samba <unfixed> (embed)
1396            - samba4 <unfixed> (embed)
1397            - cmucl <unfixed> (embed)
1398            - typo3-src <unfixed> (embed)
1399            - mauve <unfixed> (embed)
1400            - texlive-bin <unfixed> (embed)
1401            - ypsilon <unfixed> (embed)
1402            - jeuclid <unfixed> (embed)
1403            - charmap.app <unfixed> (embed)
1404            - clisp <unfixed> (embed)
1405            - gnulib <unfixed> (embed)
1406            - opensrs-client <unfixed> (embed)
1407            - saxonb <unfixed> (embed)
1408            - rails <unfixed> (embed)
1409    
1410    feedparser
1411            - rawdog <unfixed> (embed; bug #383422)
1412            - miro <unfixed> (embed; bug #555351)
1413            - calibre <unfixed> (embed; bug #555352)
1414            - freevo <unfixed> (embed; bug #555353)
1415            - pida <unfixed> (embed; bug #555354)
1416            - planet-venus <unfixed> (embed; bug #555355)
1417            - plone3 <removed> (embed; bug #555356)
1418            - exaile 0.2.14+debian-1 (embed)
1419            - screenlets 0.1.2-3 (embed)
1420            NOTE: included twice
1421    
1422    agg:
1423            - matplotlib <unfixed> (embed: bug #377271)
1424            - contextfree <unfixed> (embed)
1425            NOTE: since 2.2-1 it links statically to system libagg, but still uses the embedded copy
1426            - exactimage <unfixed> (embed)
1427            - python-enable <unfixed> (embed)
1428            - mapnik 0.5.1-3 (embed)
1429            NOTE: links statically to agg, but shared library is not available (bug #377271)
1430    
1431    vtk
1432            - paraview <unfixable> (embed; bug #495426)
1433    
1434    txt2tags
1435            - rednotebook <unfixed> (embed)
1436    
1437    htmltextview (not packaged in Debian, http://www.gnome.org/~gjc/htmltextview.py)
1438            - gajim <unfixed> (embed)
1439            - emesene <unfixed> (embed)
1440            - convirt <unfixed> (embed)
1441            - pida <unfixed> (embed)
1442            - rednotebook <unfixed> (embed)
1443    
1444    horde3 (prototype.js is among the embeds in the following)
1445            - mnemo2 <unfixed> (embed)
1446            - nag2 <unfixed> (embed)
1447            - wordpress <unfixed> (embed)
1448            NOTE: Text_Diff (wp-includes/Text/Diff*)
1449    
1450    cimg
1451            - gmic <itp> (embed)
1452    
1453    mootools
1454            - gmic <itp> (embed)
1455    
1456    openldap
1457            - openldap2.3 <removed> (old-version)
1458    
1459    grub2
1460            - grub <unfixed> (old-version)
1461    
1462    gnupginterface
1463            - duplicity <unfixed> (embed)
1464    
1465    python-dateutil
1466            - awn-extras-applets <unfixed> (embed)
1467            - matplotlib <unknown> (embed)
1468    
1469    cups
1470            - cupsys <removed> (old-version)
1471    
1472    yui
1473            - bcfg2 <not-affected> (present in source but not included in any binary files)
1474            - serendipity <unfixed> (embed; bug #557746)
1475            - moodle 1.8.2.dfsg-5 (embed)
1476            - jifty 0.91117-1 (embed; bug #557748)
1477            - webgui 7.7.26-1 (embed)
1478            - loggerhead 1.17-1 (embed)
1479    
1480    quake3 (vanilla source not packaged in debian)
1481            - openarena <unfixable> (fork)
1482    
1483    quake2 (vanilla source not packaged in debian)
1484            - alien-arena <unfixable> (fork)
1485            - warsow <unfixable> (fork)
1486    
1487    libtheora
1488            - iceweasel <not-affected> (uses xulrunner)
1489            - xulrunner <unfixed> (embed; bug #540959)
1490            [etch] - xulrunner <not-affected> (introduced in firefox 3.5)
1491            [lenny] - xulrunner <not-affected> (introduced in firefox 3.5)
1492            - iceape <unfixed> (embed; bug #559276)
1493            [etch] - iceape <not-affected> (introduced in iceape 2.0)
1494            [lenny] - iceape <not-affected> (introduced in iceape 2.0)
1495    
1496    dtoa
1497            - bfilter <unfixed> (embed)
1498            - cacao <unfixed> (embed)
1499            - cdrdao <unfixed> (embed)
1500            - classpath <unfixed> (embed)
1501            - freej <unfixed> (embed)
1502            - iceape <unfixed> (embed)
1503            - iceweasel <unfixed> (embed)
1504            - jscoverage <unfixed> (embed)
1505            - kde4libs <unfixed> (embed)
1506            - kdelibs <unfixed> (embed)
1507            - kompozer <unfixed> (embed)
1508            - libv8 <unfixed> (embed)
1509            - mono <unfixed> (embed)
1510            - newlib <unfixed> (embed)
1511            - nspr <unfixed> (embed)
1512            - php5 <unfixed> (embed)
1513            - polyml <unfixed> (embed)
1514            - qt4-x11 <unfixed> (embed)
1515            - rhino <unfixed> (embed)
1516            NOTE: code translated to Java
1517            - ruby1.8 <unfixed> (embed)
1518            - ruby1.9 <unfixed> (embed)
1519            - ruby1.9.1 <unfixed> (embed)
1520            - sdd <unfixed> (embed)
1521            - sfind <unfixed> (embed)
1522            - star <unfixed> (embed)
1523            - tinymux <unfixed> (embed)
1524            - virtualbox-ose <unfixed> (embed)
1525            - webkit <unfixed> (embed)
1526            - xulrunner <unfixed> (embed)
1527    
1528    ipc (not packaged in Debian; see http://mozdev.org/pipermail/enigmail/2009-November/011678.html)
1529            - firegpg <unfixed> (embed)
1530            - enigmail <unfixed> (embed)
1531    
1532    ptmalloc (not packaged in Debian)
1533            - crystalspace <unfixed> (embed)
1534            - qt4-x11 <unfixed> (embed)
1535    
1536    svgalib
1537            - usplash <unfixed> (embed)
1538    
1539    bogl
1540            - usplash <unfixed> (embed)
1541    
1542    taglist
1543            - usplash <unfixed> (embed)
1544    
1545    portaudio
1546            - audacity <unfixed> (embed; bug #323711)
1547    
1548    nyquist
1549            - audacity <unfixed> (embed)
1550            NOTE: embeds a forked nyquist with support for a shared library
1551    
1552    vamp-plugin-sdk
1553            - audacity <unfixed> (embed)
1554    
1555    wordpress
1556            - libwordpress-xmlrpc-perl <removed> (embed) [./xmlrpc.php]
1557    
1558    php5
1559            - php4 <removed> (old-version)
1560    
1561    classpath
1562            - libgnucrypto-java <unfixed> (embed; bug #559788)
1563    
1564    libtool
1565            - apr <unfixed> (static; bug #489625)
1566            NOTE: ships copy of libtool in libapr1-dev; was 'embed' before 1.3.2-3
1567            - arts <unfixed> (embed)
1568            - bochs 2.4.2-1 (embed; bug #560884)
1569            - camserv <unfixed> (embed)
1570            - collectd <unfixed> (embed)
1571            - courier-authlib 0.58-4 (embed)
1572            NOTE: The etch version of courier-authlib was the earliest version checked, might be fixed earlier
1573            - cvsnt <unfixed> (embed)
1574            - dico <not-affected> (Uses the system copy of ltdl)
1575            - freeradius 0.1+20010527-1 (embed)
1576            NOTE: Earliest reference I could find from the changelog is from 27 May 2001
1577            - ggobi 2.1.9~20091212-1 (embed)
1578            - glame 2.0.1-4 (embed)
1579            NOTE: The etch version of glame was the earliest version checked, might be fixed earlier
1580            - gnash <unfixed> (embed)
1581            - gnu-smalltalk <unfixed> (embed)
1582            - google-gadgets 0.10.5-0.3 (embed)
1583            NOTE: 0.10.5-0.3 was the earliest version checked, was fixed earlier
1584            - graphicsmagick 1.3.5-6 (embed)
1585            - graphviz 2.8-3 (embed)
1586            NOTE: The etch version of graphviz was the earliest version checked, might be fixed earlier
1587            - guile-1.6 1.6.8-7 (embed)
1588            - hamlib <unfixed> (embed)
1589            - hercules <unfixed> (embed)
1590            - jags 1.0.4-3 (embed; bug #560864)
1591            - kdelibs <unfixed> (embed)
1592            - libannodex <removed> (embed)
1593            - libextractor <unfixed> (embed)
1594            - libmcrypt <not-affected> (libtool source present but not included in any of the binary packages)
1595            - libtunepimp <unfixed> (embed)
1596            - mp4h <unfixed> (embed)
1597            - naim <unfixed> (embed)
1598            - parser-mysql <unfixed> (embed)
1599            - pinball 0.3.1-11 (embed)
1600            - redland <unfixed> (embed)
1601            - siproxd <unfixed> (embed)
1602            - ski <unfixed> (embed)
1603            - synfig <unfixed> (embed)
1604            - unixodbc 2.2.4-5 (embed)
1605            - xmlsec1 <not-affected> (Doesn't enable dynamic loading of crypto modules)
1606            - clamav 0.95+dfsg-1 (embed)
1607            - imagemagick 6:6.2.3.1-1 (embed)
1608            - hypre 2.4.0b-5 (embed)
1609            - lam <unfixed> (embed)
1610            - openmpi <unfixable> (embed; bug #559386)
1611            - parser <unfixed> (embed)
1612            - pdsh 2.18-5 (embed; bug #560892)
1613            - sbnc 1.2-8 (embed)
1614            - sdcc <unfixed> (embed)
1615            - wml <unfixed> (embed)
1616            - proftpd-dfsg <unfixed> (embed; bug #561748)
1617            - babel 1.4.0.dfsg-5 (embed)
1618            - libprelude 0.9.14-2 (embed)
1619            - heartbeat 2.1.4-7 (embed)
1620            NOTE: From Squeeze onwards the system copy of ltdl is used, use the current version from Squeeze,
1621            NOTE: might've been fixed earlier
1622            - gcc-* <unknown> (embed)
1623    
1624    ocamlgsl
1625            - orpie 1.5.1-7.1 (embed; bug #550058)
1626    
1627    xdotool
1628            - keynav <unfixed> (embed; bug #560103)
1629    
1630    bulletphysics (not packaged; http://www.bulletphysics.org/)
1631            - supertuxkart <unfixed> (embed)
1632            - blender <unfixed> (embed)
1633    
1634    ghostscript
1635            - gs-gpl <removed> (old-version)
1636    
1637    icedove
1638            - thunderbird <removed> (old-version)
1639    
1640    sizzlejs (not packaged in Debian, http://sizzlejs.com/)
1641            - jquery <unfixed> (embed)
1642    
1643    sed
1644            - ssed <unfixed> (fork)
1645    
1646    phpatomlib (http://code.google.com/p/phpatomlib)
1647            - wordpress <unfixed> (embed)
1648    
1649    Services_JSON (http://pear.php.net/package/Services_JSON)
1650            - wordpress <unfixed> (embed)
1651    
1652    phpass (http://www.openwall.com/phpass/)
1653            - gallery2 <unfixed> (embed)
1654            - wordpress <unfixed> (embed)
1655            - typo3-src <unfixed> (fork)
1656            NOTE: file refers to drupal, maybe there's a copy somewhere there
1657            NOTE: a copyright owner search didn't match anything
1658            - libauthen-passphrase-perl <unfixable> (fork)
1659            NOTE: perl implementation of phpass
1660    
1661    squirrelmail
1662            - wordpress <unfixed> (embed)
1663            NOTE: class-pop3.php
1664    
1665    ezSQL (http://www.woyano.com/jv/ezsql)
1666            - wordpress <unfixable> (fork)
1667            NOTE: wp-db.php
1668    
1669    Diff.php (Clay Loveless' version/killersoft.com)
1670            - php-versioncontrol-svn <unfixed>
1671    
1672    libm
1673            - spring <unfixed> (embed)
1674            NOTE: embedded by embedded copy of streflop
1675    
1676    streflop
1677            - spring <unfixed> (embed)
1678    
1679    minizip
1680            - spring <unfixed> (embed)
1681    
1682    oscpack
1683            - spring <unfixed> (embed)
1684    
1685    hpiutil2
1686            - spring <unfixed> (embed)
1687    
1688    p7zip
1689            - spring <unfixed> (embed)
1690    
1691    pythonqt (doesn't seem to be python-qtN, unknown source)
1692            - fontmatrix <unfixed> (embed)
1693            - elmerfem <unfixed> (embed)
1694    
1695    iepngfix (not packaged in Debian; http://www.twinhelix.com/css/iepngfix/)
1696            - docvert <unfixed> (embed)
1697            - jifty <unfixed> (embed)
1698            - kdenetwork <unfixed> (embed)
1699            - mediatomb <unfixed> (embed)
1700            - plastex <unfixed> (embed)
1701            - plone3 <removed> (embed)
1702            - python-chaco <unfixed> (embed)
1703            - python-docutils <unfixed> (embed)
1704            - s5 <unfixed> (embed)
1705            - zope2.10 <unfixed> (embed)
1706            - zope2.11 <removed> (embed)
1707            - cython <not-affcted> (embed)
1708            NOTE: part of documentation, which is not installed into the binary package
1709    
1710    python-docutils
1711            - zope2.10 <unfixed> (embed)
1712            - zope2.11 <removed> (embed)
1713    
1714  etl-dev (will be renamed to libetl-dev soon):  tesseract
1715  synfig          - ocropus <unfixed> (static)
1716    
 libphp-adodb:  
 moodle  
 cacti (dependency exists, but internal version is used)  
1717    antlr
1718            - kdevelop <unfixed> (embed)

Legend:
Removed from v.3777  
changed lines
  Added in v.13831

  ViewVC Help
Powered by ViewVC 1.1.5